diff --git a/clusters/preventive-measure.json b/clusters/preventive-measure.json
index 4e6592b..f8fb4d9 100644
--- a/clusters/preventive-measure.json
+++ b/clusters/preventive-measure.json
@@ -284,6 +284,19 @@
       },
       "uuid": "123e20c5-8f44-4de5-a183-6890788e5a81",
       "value": "Blacklist-phone-numbers"
+    },
+    {
+      "description": "Restrict access to shares users should not be allowed to write to",
+      "meta": {
+        "complexity": "Medium",
+        "effectiveness": "Medium",
+        "impact": "Medium",
+        "refs": [
+          "https://docs.microsoft.com/en-us/windows/desktop/secauthz/access-control-lists"
+        ]
+      },
+      "uuid": "3e7a7fb5-8db2-4033-8f4f-d76721819765",
+      "value": "ACL"
     }
   ],
   "version": 3