+SI-03(04) Updates Only by Privileged Users

SI-03(04) Updates Only by Privileged Users

Control

Update malicious code protection mechanisms only when directed by a privileged user.

Discussion

Protection mechanisms for malicious code are typically categorized as security-related software and, as such, are only updated by organizational personnel with appropriate access privileges.

Assessment Objective

malicious code protection mechanisms are updated only when directed by a privileged user.

Assessment Method

Examine

System and information integrity policy system and information integrity procedures procedures addressing malicious code protection list of privileged users on system system design documentation malicious code protection mechanisms records of malicious code protection updates system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

System/network administrators organizational personnel with information security responsibilities system developers organizational personnel installing, configuring, and/or maintaining the system organizational personnel responsible for malicious code protection

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by SI-03(04) Updates Only by Privileged Users – Assessment Procedure