ComplianceNIST 800-53 enhancement
NIST-SC-18(1) Identify Unacceptable Code and Take Corrective Actions
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- SC System and Communications Protection
- Control
- SC-18(1)
Control statement
Identify [Assignment: unacceptable mobile code] and take [Assignment: corrective actions].
Discussion
Corrective actions when unacceptable mobile code is detected include blocking, quarantine, or alerting administrators. Blocking includes preventing the transmission of word processing files with embedded macros when such macros have been determined to be unacceptable mobile code.
Related
Enhancement of · Compliance (1)
- NIST-SC-18 Mobile Code NIST 800-53 control