65 controls in the catalogue
L1 Model L2 Harness L3 Application L4 Infrastructure / target All layers
One row per control, by layer: the risks it mitigates, and where the 27 of 183 incidents read for controls saw it hold or not hold.
L4 Infrastructure / target Organisation hit
| Control | Risks it mitigates | In incidents read |
|---|---|---|
| Known flaws patched Published vulnerabilities on exposed systems are fixed within a set time. |
AI used to run a cyber attack · AI system attacked or breached | not seen in an incident yet |
| Multi-factor sign-in and password policy Accounts need a second factor; weak or reused passwords are refused. |
Credential and privilege abuse · AI used to run a cyber attack | not seen in an incident yet |
| Network segmentation A foothold in one part of the network does not reach the rest. |
AI used to run a cyber attack | not seen in an incident yet |
| Intrusion and endpoint detection Attacks in progress raise an alert someone acts on. |
AI used to run a cyber attack · AI system attacked or breached | not seen in an incident yet |
| Bot and scraping defences Automated, high-volume access is detected and throttled. |
Privacy harm to a person | not seen in an incident yet |
| Backups and recovery Data and systems can be restored after deletion or encryption. |
Agent takes destructive or unapproved actions · AI used to run a cyber attack | not seen in an incident yet |
| Secrets scanning Keys and tokens left in code, repositories or logs are found and revoked. |
Credential and privilege abuse · Supply-chain compromise | not seen in an incident yet |
| Inventory of exposed services Every internet-facing system is known and owned. |
AI system attacked or breached | not seen in an incident yet |
| Phishing and fraud filters Messages and calls that impersonate people or brands are caught. |
AI used to run a cyber attack · Manipulation and misinformation | not seen in an incident yet |