Space ISAC (Information Sharing and Analysis Center) - Threat Framework
Ground Segment Threats

Space ISAC (Information Sharing and Analysis Center) - Threat Framework GT-4: Social Engineering Attacks

Social engineering and phishing attacks targeting space operations personnel must be monitored and reported.

Maintained by Gerard BlokdykControl text last updated

What else in your programme already covers this

This control maps to 33 controls across 25 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 2 controls

Secure by Design: A Guide for Manufacturers (CISA) · 2 controls

  • CISABD-3 Build Organizational Structure and Leadership for Secure Outcomes
  • SBD-DEV-04 Phishing-Resistant Authentication

ASD Strategies to Mitigate Cyber Security Incidents · 1 control

  • ASD37-37 Personnel management (Very Good)

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

  • AWWA-1.3 Security Awareness and Training

FBI CJIS Security Policy · 1 control

  • CJIS-2 Security Awareness Training

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

FTC GLBA Safeguards Rule (16 CFR Part 314) · 1 control

IATA Operational Safety Audit (IOSA) Standards Manual · 1 control

IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.2) · 1 control

ISO 13485 · 1 control

ISO 27799 · 1 control

ISO 28001:2007 Supply Chain Security Management · 1 control

ISO/IEC 27011:2024 · 1 control

MARS-E · 1 control

MDS2 (Medical Device) · 1 control

NIST Privacy Framework · 1 control

  • NISTPF-8 Protect-P Information Protection Processes (PR.PO-P)

NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements · 1 control

  • 3.2.1 Account data storage is kept to a minimum through implementation of data retention and disposal policies, procedures, and processes that include at least the following: • Coverage for all locations of stored account data.

NIST SP 800-66 · 1 control

  • NISTSP66-2 Workforce Security, Information Access Management, and Awareness Training

NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security · 1 control

  • NISTSP82-1 OT Security Program Governance, Policy, Roles, and Safety-Security Integration

NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity · 1 control

New Zealand Information Security Manual (NZISM) · 1 control

  • NZISM-1 NZISM Governance, Documentation, and Classification System

Oman National Cybersecurity Framework · 1 control

  • OMANCS-8 Third-Party + Supply Chain Risk, Awareness Training, Physical Security, Compliance Audit

PAS 1192-5:2015 - Security-Minded Approach to BIM and Digital Built Environments · 1 control

  • PASONE-3 Personnel Security, Vetting, Awareness, and Training

TISAX - Trusted Information Security Assessment Exchange · 1 control

UK Gambling Commission - Cyber Resilience Requirements · 1 control

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Ground Segment Threats

Query this from an agent

The graph holds this control, the 33 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Space ISAC (Information Sharing and Analysis Center) - Threat Framework controls