+SC-27 Platform-independent Applications
|
SC-27 Platform-independent Applications
Control
Include within organizational systems the following platform independent applications: [Assignement: platform-independent applications].
Discussion
Platforms are combinations of hardware, firmware, and software components used to execute software applications. Platforms include operating systems, the underlying computer architectures, or both. Platform-independent applications are applications with the capability to execute on multiple platforms. Such applications promote portability and reconstitution on different platforms. Application portability and the ability to reconstitute on different platforms increase the availability of mission-essential functions within organizations in situations where systems with specific operating systems are under attack.
Assessment Objective
[Assignement: platform-independent applications] are included within organizational systems.
Assessment Method
Examine
System and communications protection policy
procedures addressing platform-independent applications
system design documentation
system configuration settings and associated documentation
list of platform-independent applications
system audit records
system security plan
other relevant documents or records
Interview
System/network administrators
organizational personnel with information security responsibilities
system developer
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|