+CM-07(06) Confined Environments with Limited Privileges

CM-07(06) Confined Environments with Limited Privileges

Control

Require that the following user-installed software execute in a confined physical or virtual machine environment with limited privileges: [Assignement: user-installed software].

Discussion

Organizations identify software that may be of concern regarding its origin or potential for containing malicious code. For this type of software, user installations occur in confined environments of operation to limit or contain damage from malicious code that may be executed.

Assessment Objective

[Assignement: user-installed software] is required to be executed in a confined physical or virtual machine environment with limited privileges.

Assessment Method

Examine

Configuration management policy procedures addressing least functionality in the system configuration management plan system design documentation system configuration settings and associated documentation list or record of software required to execute in a confined environment system component inventory common secure configuration checklists system audit records system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for identifying and/or managing user-installed software and associated privileges organizational personnel with information security responsibilities system/network administrators

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by CM-07(06) Confined Environments with Limited Privileges – Assessment Procedure
is blocked by Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas