GRCA Planeth
Nie jesteś zalogowany
Zaloguj się
Start
Źródła
›
CM-11 User-installed Software
›
Standard - CM-11(02) Software Installation with Privileged Status
+CM-11(02) Software Installation with Privileged Status
CM-11(02) Software Installation with Privileged Status
Control
Allow user installation of software only with explicit privileged status.
Discussion
Privileged status can be obtained, for example, by serving in the role of system administrator.
Assessment Objective
user installation of software is allowed only with explicit privileged status.
Assessment Method
Examine
Configuration management policy procedures addressing user-installed software configuration management plan system security plan system design documentation system configuration settings and associated documentation alerts/notifications of unauthorized software installations system audit records continuous monitoring strategy system security plan other relevant documents or records
Interview
Organizational personnel with responsibilities for governing user-installed software organizational personnel operating, using, and/or maintaining the system organizational personnel with information security responsibilities system/network administrators
1. Przegląd
Tytuł
Norma
1.1 Odwołania
1.2 Zidentyfikowane wymagania
1.3 Powiązane regulacje
2. Zidentyfikowane wymagania
Wymagania
Źródło
Wymaganie
3. Powiązane regulacje
Regulacje
Źródło
Regulacja
Powiązane zgłoszenia
Powiązania
Typ powiązania
Zgłoszenie
is blocked by
CM-11(02) Software Installation with Privileged Status – Assessment Procedure
is blocked by
Role-Based Permissions To Implement Changes
is blocked by
Restrict Roles Permitted To Install Software
NIST
-
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final