+SC-18(03) Prevent Downloading and Execution

SC-18(03) Prevent Downloading and Execution

Control

Prevent the download and execution of [Assignement: unacceptable mobile code].

Discussion

None.

Assessment Objective

  1. the download of [Assignement: unacceptable mobile code] is prevented;
  2. the execution of [Assignement: unacceptable mobile code] is prevented.

Assessment Method

Examine

System and communications protection policy procedures addressing mobile code mobile code usage restrictions mobile code implementation policy and procedures system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developer organizational personnel with responsibilities for managing mobile code

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by SC-18(03) Prevent Downloading and Execution – Assessment Procedure
is blocked by Mobile Code
is blocked by DNS & Content Filtering