Skip to content

Countermeasure

What is Countermeasure?

An action, device, procedure, or technique that reduces a threat, vulnerability, or attack by eliminating or preventing it, minimizing harm, or enabling discovery.

Risk Management

Frameworks that govern countermeasure

NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on countermeasure

Requirements naming countermeasure across 6 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications2 controls

X.805 Clause 8 defines 5 Threat Categories that the X.805 Security Architecture is designed to mitigate + provides a Threat-Dimension Countermeasure Matrix linking each threat to specific Dimensions.

X805-Threats-Destruction-Corruption-Removal-Disclosure-Interruption-72Cell-Matrix-Application · ITU-T X.805 5 Threat Categories - Destruction + Corruption + Removal + Disclosure + Interruption + Threat-Dimension Countermeasure Matrix + 72-Cell Matrix Application + STRIDE + MITRE ATT and CK + Network Modular Risk Assessment →
China Personal Information Protection Law (PIPL)1 control

China may take reciprocal measures against countries/regions that adopt discriminatory prohibitions or restrictions against China in personal-information protection.

PIPL-Art43 · Reciprocal Countermeasures →
MITRE D3FEND1 control

Establish the scope of MITRE D3FEND (Detection, Denial and Disruption Framework Empowering Network Defense) - defensive cybersecurity countermeasure knowledge graph developed by MITRE Corporation under funding from National Security Agency (NSA) Information As...

MITRE-D3FEND-Scope-MITRE-NSA-2021-CC-BY-4-0-Countermeasure-Knowledge-Graph-Companion-ATTACK-Ontology · MITRE D3FEND Scope + MITRE + NSA 2021 + CC BY 4.0 + Countermeasure Knowledge Graph + Companion to ATT&CK + Ontology →
NIST SP 800-53 Rev 51 control

Technical Surveillance Countermeasures Survey. Employ a technical surveillance countermeasures survey at [organization-defined] [organization-defined]

NIST800-RA-6 · Technical Surveillance Countermeasures Survey. Employ a technical surveillance countermeasures survey at [organization-defined] [organization-defined] →
PTES1 control

Where in scope, the tester must consider AV, EDR, IDS, and similar controls and use evasion techniques that mirror realistic threat actor tradecraft while leaving sufficient logs for blue team replay.

PTES-EX-2 · Countermeasure Evasion and Anti Forensics →
ASIC Cyber Resilience Good Practices1 control

Provide proactive reporting to the board on changing threats and the countermeasures in place.

ASIC-CR-RR-3 · Proactive board reporting during incidents →

Questions people ask about countermeasure

What is Countermeasure?
An action, device, procedure, or technique that reduces a threat, vulnerability, or attack by eliminating or preventing it, minimizing harm, or enabling discovery.
Why is Countermeasure important for compliance?
Countermeasure is a key concept in Risk Management. Understanding countermeasure helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Countermeasure?
Countermeasure appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, China Personal Information Protection Law (PIPL), MITRE D3FEND, NIST SP 800-53 Rev 5, PTES. Across these standards we have identified 7 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Countermeasure?
Explore our compliance framework pages to see how countermeasure applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Countermeasure applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.