Data Exfiltration
What is Data Exfiltration?
The unauthorised transfer of data from within an organisation to an external destination. Data exfiltration can occur through various channels including email, USB drives, cloud uploads, and covert network channels.
Terms that appear alongside data exfiltration
Each of these is named in at least one of the same controls as data exfiltration. The number is how many controls name both.
- ransomware 3 shared controls
- lateral movement 3 shared controls
- critical infrastructure 2 shared controls
- anomaly detection 2 shared controls
- chain of custody 2 shared controls
- authentication 2 shared controls
Frameworks that govern data exfiltration
What the standards actually require on data exfiltration
Requirements naming data exfiltration across 4 standards, quoted from the control text.
Controls such as data loss prevention tools, authentication, restricted remote access and cloud services, and monitoring of user activity are implemented to restrict data exfiltration.
australian-energy-sector-cyber-security-framework-aescsf::ARCHITECTURE-5f · ARCHITECTURE-5f: Controls restrict data exfiltration →Enable Microsoft Defender for Storage, SQL, and Databases to detect anomalous access patterns and data exfiltration attempts.
DP-2 · Monitor anomalies and threats targeting sensitive data →X.805 Clause 8 defines 5 Threat Categories that the X.805 Security Architecture is designed to mitigate + provides a Threat-Dimension Countermeasure Matrix linking each threat to specific Dimensions.
X805-Threats-Destruction-Corruption-Removal-Disclosure-Interruption-72Cell-Matrix-Application · ITU-T X.805 5 Threat Categories - Destruction + Corruption + Removal + Disclosure + Interruption + Threat-Dimension Countermeasure Matrix + 72-Cell Matrix Application + STRIDE + MITRE ATT and CK + Network Modular Risk Assessment →Operate log analysis per NIST SP 800-92 Chapter 5 (Operational Processes) + Section 5.12 (Performing Log Analysis). Correlation and detection rules per Section 5.12.1: implement correlation rules combining signals across sources (authentication + endpoint + ne...
NISTSP92-5 · Log Analysis: Correlation, Baselining, Anomaly Detection, Alerting, Manual Review →Questions people ask about data exfiltration
What is Data Exfiltration?
Why is Data Exfiltration important for compliance?
Which compliance frameworks address Data Exfiltration?
Where can I learn more about Data Exfiltration?
See how Data Exfiltration applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.