1. Home
  2. NIST References
  3. CP-13

CP-13 - Alternative Security Mechanisms

Employ [Assignment: organization-defined alternative or supplemental security mechanisms] for satisfying [Assignment: organization-defined security functions] when the primary means of implementing the security function is unavailable or compromised.


ID: CP-13
Enhancements: 

Space Segment Guidance

In the space domain, “alternative security mechanisms” often encompass resiliency measures that extend beyond conventional controls, ensuring mission continuity under non-traditional or contested conditions. For an unmanned spacecraft, these mechanisms might include hardware-level redundancies for cryptographic modules, custom “safe mode” states that isolate suspected breaches, or fallback communication protocols that can bypass standard pathways if the primary link is compromised. In a multi-payload environment, alternative mechanisms may involve strict hardware partitioning to insulate critical bus commands from high-risk payload software. Additionally, spacecraft can implement advanced anomaly detection algorithms—possibly leveraging onboard AI—to autonomously reject or quarantine suspect commands until ground operators can analyze the situation. While often more complex to design and validate, such approaches can significantly bolster mission assurance when standard controls are inadequate or infeasible due to radiation, latency, or the inherent physical constraints of on-orbit assets.