What it means
Initial access techniques are the phishing, exploitation, credential, supply-chain, and trusted-relationship methods adversaries use to obtain a first foothold.
Why it matters
A precise mental model helps practitioners interpret activity correctly, select proportionate controls, and explain technical consequences without hiding behind vocabulary.
Practical focus
- Define the concept in operational terms
- Map it to observable system or user behavior
- Connect the behavior to preventive and detective controls
- Validate assumptions with evidence rather than labels
Common mistakes
- Memorizing terminology without understanding behavior
- Treating one indicator as conclusive evidence
- Ignoring normal operational context
- Applying a control without checking what it can actually observe
Certification relevance
This subject appears in or supports the following certification bodies of knowledge: