ComplianceNIST 800-53 enhancement

NIST-CM-7(2) Prevent Program Execution

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
CM Configuration Management
Control
CM-7(2)

Control statement

Prevent program execution in accordance with [Selection (one or more of): {{ insert: param, cm-07.02_odp.02 }} ; rules authorizing the terms and conditions of software program usage].

Discussion

Prevention of program execution addresses organizational policies, rules of behavior, and/or access agreements that restrict software usage and the terms and conditions imposed by the developer or manufacturer, including software licensing and copyrights. Restrictions include prohibiting auto-execute features, restricting roles allowed to approve program execution, permitting or prohibiting specific software programs, or restricting the number of program instances executed at the same time.

Related

Enhancement of · Compliance (1)

  • NIST-CM-7 Least Functionality NIST 800-53 control

Related control · Compliance (5)

  • NIST-CM-8 System Component Inventory NIST 800-53 control
  • NIST-PL-4 Rules of Behavior NIST 800-53 control
  • NIST-PL-9 Central Management NIST 800-53 control
  • NIST-PM-5 System Inventory NIST 800-53 control
  • NIST-PS-6 Access Agreements NIST 800-53 control