+CM-07(07) Code Execution in Protected Environments

CM-07(07) Code Execution in Protected Environments

Control

Allow execution of binary or machine-executable code only in confined physical or virtual machine environments and with the explicit approval of [Assignement: personnel or roles] when such code is:
  1. Obtained from sources with limited or no warranty; and/or
  2. Without the provision of source code.

Discussion

Code execution in protected environments applies to all sources of binary or machine-executable code, including commercial software and firmware and open-source software.

Assessment Objective

the execution of binary or machine-executable code is only allowed in confined physical or virtual machine environments;
  1. the execution of binary or machine-executable code obtained from sources with limited or no warranty is only allowed with the explicit approval of [Assignement: personnel or roles];
  2. the execution of binary or machine-executable code without the provision of source code is only allowed with the explicit approval of [Assignement: personnel or roles].

Assessment Method

Examine

Configuration management policy procedures addressing least functionality in the system configuration management plan system design documentation system configuration settings and associated documentation list or record of binary or machine-executable code system component inventory common secure configuration checklists system audit records system security plan other relevant documents or records

Interview

Organizational personnel with responsibilities for approving execution of binary or machine-executable code organizational personnel with information security responsibilities organizational personnel with software management responsibilities system/network administrators system developers

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
is blocked by CM-07(07) Code Execution in Protected Environments – Assessment Procedure
is blocked by Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas