THR-08
Tainting
Description
Mechanisms exist to embed false data or steganographic data in files to enable the organization to determine if data has been exfiltrated and provide a means to identify the individual(s) involved.
Control Question
Does the organization embed false data or steganographic data in files to enable the organization to determine if data has been exfiltrated and provide a means to identify the individual(s) involved?
Control Metadata
Domain:
Threat Management
Validation Cadence:
Annual