+SC-18(05) Allow Execution Only in Confined Environments

SC-18(05) Allow Execution Only in Confined Environments

Control

Allow execution of permitted mobile code only in confined virtual machine environments.

Discussion

Permitting the execution of mobile code only in confined virtual machine environments helps prevent the introduction of malicious code into other systems and system components.

Assessment Objective

execution of permitted mobile code is allowed only in confined virtual machine environments.

Assessment Method

Examine

System and communications protection policy procedures addressing mobile code mobile code usage allowances mobile code usage restrictions system design documentation system configuration settings and associated documentation list of confined virtual machine environments in which the execution of organizationally acceptable mobile code is allowed system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developer organizational personnel with responsibilities for managing mobile code

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by SC-18(05) Allow Execution Only in Confined Environments – Assessment Procedure