Skip to content

Network Segmentation

Mitigation · ATTACK:ics:M0930

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:ics:M0930",
  "title": "Network Segmentation",
  "type": "Mitigation",
  "source_url": "https://attack.mitre.org/mitigations/M0930",
  "snapshot": "ics-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "course-of-action--1e7ccfc0-94c8-496e-8d27-032120892291",
  "external_id": "M0930",
  "domain": "ics",
  "created": "2019-06-10T20:41:03.271Z",
  "modified": "2026-05-12T15:12:00.730Z",
  "version": "1.1",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "IEC August 2013",
      "url": "https://webstore.iec.ch/publication/7033"
    },
    {
      "source_name": "IEC February 2019",
      "url": "https://webstore.iec.ch/publication/34421"
    }
  ]
}

Explicit source assertions (39)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0869

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--0ff88ef7-44fd-4307-b381-2e0bc76ce83b

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T1693.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--16b92a53-7334-42b1-bc55-dcd4907fdd9f

Department of Homeland Security September 2016

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0838

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--19ab6776-42de-48af-975a-568d31a3bb66

Department of Homeland Security September 2016 · N/A

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T1693

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--21c7b1bb-ba40-4843-b462-079b1b85c01b

Department of Homeland Security September 2016

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0822

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--220140ac-d927-4d86-9335-c04aa6ee3c61

Keith Stouffer May 2015

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0883

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--33215dfa-53d0-4bd7-a15d-cec9315c7c4d

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0842

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--34d4101b-b4c9-4ea3-a84d-81e84e7f5033

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T1692.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--34dcc9e8-a43a-475b-81b6-b15240545075

Department of Homeland Security September 2016 · Dwight Anderson 2014 · Karen Scarfone; Paul Hoffman September 2009 · Keith Stouffer May 2015

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0830

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--35cf6922-d48f-42ea-b7f5-f0258892bd52

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0846.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--3680ab7a-254b-426c-b417-460712c2f357

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T1695.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--39dcfc44-5f18-475f-b431-22032a14cbe5

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0816

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--45ee1822-71e4-4d92-976d-306561b70555

Department of Homeland Security September 2016

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0846.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--49aebf0c-e231-4cbb-84a2-97c9a6d11654

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T1695.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--4b44a657-11cc-45bc-b096-f32e58a70036

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0886

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--502a0b7e-048a-468a-b888-e91fde47c6eb

North America Transmission Forum December 2019

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0843.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--544f0447-0f37-4b1c-b424-3fbcdee15e63

Department of Homeland Security September 2016

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0806

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--56672ea4-cbf0-4a3e-8aed-edcc7d33133b

Karen Scarfone; Paul Hoffman September 2009 · Keith Stouffer May 2015 · Department of Homeland Security September 2016 · Dwight Anderson 2014

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0848

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--61668e93-6d9d-418d-9fbd-2d88c3a66544

Karen Scarfone; Paul Hoffman September 2009 · Keith Stouffer May 2015 · Department of Homeland Security September 2016 · Dwight Anderson 2014

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0866

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--63323b12-86db-4b91-a701-90daf3f98f7c

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0845

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--671043a9-337f-411a-9ca9-3112e897ab09

Department of Homeland Security September 2016

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0864

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--798919d3-df8b-463f-b2be-4c1aa8089384

North America Transmission Forum December 2019

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0846.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--86d04319-a13e-4105-9def-c659360c4613

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0843

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--8fcecf74-36df-41ab-9476-539c9ac0b339

Department of Homeland Security September 2016

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0843.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9b7bc0f3-c7cf-47e4-a3ed-0f91e01831ca

Department of Homeland Security September 2016

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0881

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--9cca3120-c95e-4f5e-bc4b-0521ab5cc512

Department of Homeland Security September 2016

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0802

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a08d85dd-a8b3-4848-94aa-941c43b6d8f2

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T1695.002

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--a3fb7c3c-7064-43d2-849c-2a5893583de9

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T1693.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ac8d2d28-5fdc-44d6-9e5a-8e5560b3f91f

Department of Homeland Security September 2016

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T1695

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--ae1e5c1a-8f2f-4a5a-a262-3d485c20e7a0

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0878

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--b1768154-221c-48be-ab2b-549ec1eddafb

Karen Scarfone; Paul Hoffman September 2009 · Keith Stouffer May 2015 · Department of Homeland Security September 2016 · Dwight Anderson 2014

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0885

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--bde941c6-2ca0-4f94-9336-027e7eee15a1

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0861

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--c7aac6c9-da16-46e2-8cfa-dca07a0a7562

Karen Scarfone; Paul Hoffman September 2009 · Keith Stouffer May 2015 · Department of Homeland Security September 2016 · Dwight Anderson 2014

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0843.003

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--d03785b3-9b51-45f2-aff5-029555c53826

Department of Homeland Security September 2016

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T1692

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e62235fe-0546-4755-ad01-fedce306ef89

Department of Homeland Security September 2016 · Dwight Anderson 2014 · Karen Scarfone; Paul Hoffman September 2009 · Keith Stouffer May 2015

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0858

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--e6e0ef82-2cb6-43fe-8f4a-b9e4d5a57b13

Department of Homeland Security September 2016

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0868

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--eac550b4-3bd2-4309-8b37-b797dd0bd8a7

Department of Homeland Security September 2016

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0800

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--f15f24d2-e581-46ce-83e4-a924f572aae6

Department of Homeland Security September 2016

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T0819

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fcb7733f-553d-43de-a8c6-c85a5cd65041

ATTACK:ics:M0930 → mitigates → ATTACK:ics:T1692.001

MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.

Assertion source · Locator: relationship--fd52f382-115f-483a-82c1-bb31fe5d5eb6

Department of Homeland Security September 2016 · Dwight Anderson 2014 · Karen Scarfone; Paul Hoffman September 2009 · Keith Stouffer May 2015

Provided as is, for information only, with no warranty and no liability. Not legal or professional advice. Security and radio material is for authorized, lawful use only. Full disclaimer.

Visits are logged on our own server: IP address, browser and device details, and pages viewed. We use them to understand traffic and spot attacks, and never share or sell them.