[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-800-53\u002Fsc-30":3},{"item":4,"lessons":18,"controls":52,"related":81},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":13,"official_url":14,"link_label":15,"note":16,"updated_at":17},"nist-800-53","sc-30","SC-30","Concealment and Misdirection",8,"US National Institute of Standards and Technology (NIST)","**What it asks for.** The organisation must employ defined concealment and misdirection techniques for defined systems and periods to confuse and mislead adversaries.\n\n**In practice.** This is an advanced control most often adopted by mature security programmes. Techniques include randomising configurations, hiding system details from public view, minimising information disclosed in banners and error messages, and using deception technologies. Evidence would include a description of the techniques chosen, where they apply and how their effect is monitored. Any techniques used should be documented so that defenders are not misled themselves.\n\n**Common gaps.** Organisations sometimes treat obscurity as a substitute for real protection rather than a supplement. Basic information leakage through banners, error messages and public metadata is often overlooked. Concealment can also complicate operations if it is not coordinated with IT teams.","Employ the following concealment and misdirection techniques for [Assignment: organization-defined systems] at [Assignment: organization-defined time periods] to confuse and mislead adversaries: [Assignment: organization-defined concealment and misdirection techniques].\nDiscussion: Concealment and misdirection techniques can significantly reduce the targeting capabilities of adversaries (i.e., window of opportunity and available attack surface) to initiate and complete attacks. For example, virtualization techniques provide organizations with the ability to disguise systems, potentially reducing the likelihood of successful attacks without the cost of having multiple platforms. The increased use of concealment and misdirection techniques and methods—including randomness, uncertainty, and virtualization—may sufficiently confuse and mislead adversaries and subsequently increase the risk of discovery and\u002For exposing tradecraft. Concealment and misdirection techniques may provide additional time to perform core mission and business functions. The implementation of concealment and misdirection techniques may add to the complexity and management overhead required for the system.","From NIST SP 800-53 Rev. 5, a work of the US government in the public domain.","https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F53\u002Fr5\u002Fupd1\u002Ffinal","Open SP 800-53 at NIST",null,"2026-10-18T15:18:43.663+00:00",{"total":9,"list":19},[20,24,28,32,36,40,44,48],{"slug":21,"title":22,"published_at":23},"critical-iot-platform-vulnerabilities-expose-smart-home-devices","Critical IoT Platform Vulnerabilities Expose Smart Home Devices","2026-06-11T18:22:00.061+00:00",{"slug":25,"title":26,"published_at":27},"fake-ledger-live-app-bypasses-apple-store-security-steals-95m-in-crypto","Fake Ledger Live App Bypasses Apple Store Security, Steals $9.5M in Crypto","2026-04-15T23:08:22.007+00:00",{"slug":29,"title":30,"published_at":31},"malicious-ide-extensions-compromise-developer-systems-via-supply-chain-attack","Malicious IDE Extensions Compromise Developer Systems via Supply Chain Attack","2026-04-10T17:09:14.183+00:00",{"slug":33,"title":34,"published_at":35},"delayed-ioc-sharing-hampers-community-defense-against-supply-chain-attack","Delayed IOC Sharing Hampers Community Defense Against Supply Chain Attack","2026-04-10T08:08:42.626+00:00",{"slug":37,"title":38,"published_at":39},"six-month-social-engineering-campaign-leads-to-285m-crypto-theft","Six-Month Social Engineering Campaign Leads to $285M Crypto Theft","2026-04-06T12:08:18.627+00:00",{"slug":41,"title":42,"published_at":43},"north-korean-hackers-compromise-axios-npm-package-through-social-engineering","North Korean Hackers Compromise Axios npm Package Through Social Engineering","2026-04-04T22:07:26.961+00:00",{"slug":45,"title":46,"published_at":47},"major-technology-vendor-compromised-by-shinyhunters-threat-group","Major Technology Vendor Compromised by ShinyHunters Threat Group","2026-04-01T15:07:19.318+00:00",{"slug":49,"title":50,"published_at":51},"malware-campaign-uses-compromised-code-signing-certificate-to-impersonate-bluebeam-software","Malware Campaign Uses Compromised Code Signing Certificate to Impersonate BlueBeam Software","2026-04-01T10:08:08.432+00:00",[53,58,63,68,72,77],{"slug":54,"name":55,"problem":56,"stories":57},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",5,{"slug":59,"name":60,"problem":61,"stories":62},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",4,{"slug":64,"name":65,"problem":66,"stories":67},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",3,{"slug":69,"name":70,"problem":71,"stories":67},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",{"slug":73,"name":74,"problem":75,"stories":76},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",1,{"slug":78,"name":79,"problem":80,"stories":76},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[82,88,93,99,103,107,111,115],{"family":83,"item":84,"code":85,"title":86,"together":87},"nist-sp","800-161","SP 800-161","SP 800-161 Rev. 1: Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations",6,{"family":89,"item":90,"code":91,"title":92,"together":57},"cis","2","Control 2","Inventory and Control of Software Assets",{"family":94,"item":95,"code":96,"title":97,"together":98},"iso","27036","ISO\u002FIEC 27036","ISO\u002FIEC 27036: Cybersecurity, Supplier relationships",2,{"family":89,"item":100,"code":101,"title":102,"together":98},"16","Control 16","Application Software Security",{"family":89,"item":104,"code":105,"title":106,"together":76},"14","Control 14","Security Awareness and Skills Training",{"family":89,"item":108,"code":109,"title":110,"together":76},"6","Control 6","Access Control Management",{"family":89,"item":112,"code":113,"title":114,"together":76},"7","Control 7","Continuous Vulnerability Management",{"family":89,"item":116,"code":117,"title":118,"together":76},"15","Control 15","Service Provider Management"]