+SC-18(01) Identify Unacceptable Code and Take Corrective Actions

SC-18(01) Identify Unacceptable Code and Take Corrective Actions

Control

Identify [Assignement: unacceptable mobile code] and take [Assignement: corrective actions].

Discussion

Corrective actions when unacceptable mobile code is detected include blocking, quarantine, or alerting administrators. Blocking includes preventing the transmission of word processing files with embedded macros when such macros have been determined to be unacceptable mobile code.

Assessment Objective

  1. [Assignement: unacceptable mobile code] is identified;
  2. [Assignement: corrective actions] are taken if unacceptable mobile code is identified.

Assessment Method

Examine

System and communications protection policy procedures addressing mobile code mobile code usage restrictions mobile code implementation policy and procedures system design documentation system configuration settings and associated documentation list of unacceptable mobile code list of corrective actions to be taken when unacceptable mobile code is identified system monitoring records system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developer organizational personnel with responsibilities for managing mobile code

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
is blocked by SC-18(01) Identify Unacceptable Code and Take Corrective Actions – Assessment Procedure
is blocked by Mobile Code
is blocked by Vulnerability Remediation Process
is blocked by Continuous Vulnerability Remediation Activities