+CM-07(02) Prevent Program Execution
|
CM-07(02) Prevent Program Execution
Control
Prevent program execution in accordance with [Selection(one-or-more): {{ insert: param, cm-07.02_odp.02 }} ; rules authorizing the terms and conditions of software program usage].
Discussion
Prevention of program execution addresses organizational policies, rules of behavior, and/or access agreements that restrict software usage and the terms and conditions imposed by the developer or manufacturer, including software licensing and copyrights. Restrictions include prohibiting auto-execute features, restricting roles allowed to approve program execution, permitting or prohibiting specific software programs, or restricting the number of program instances executed at the same time.
Assessment Objective
program execution is prevented in accordance with [Selection(one-or-more): {{ insert: param, cm-07.02_odp.02 }} ; rules authorizing the terms and conditions of software program usage].
Assessment Method
Examine
Configuration management policy
procedures addressing least functionality in the system
configuration management plan
system design documentation
system configuration settings and associated documentation
system component inventory
common secure configuration checklists
specifications for preventing software program execution
change control records
system audit records
system security plan
other relevant documents or records
Interview
Organizational personnel with information security responsibilities
system/network administrators
system developers
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|