ComplianceNIST 800-53 enhancement

NIST-SI-7(15) Code Authentication

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SI System and Information Integrity
Control
SI-7(15)

Control statement

Implement cryptographic mechanisms to authenticate the following software or firmware components prior to installation: [Assignment: software or firmware components].

Discussion

Cryptographic authentication includes verifying that software or firmware components have been digitally signed using certificates recognized and approved by organizations. Code signing is an effective method to protect against malicious code. Organizations that employ cryptographic mechanisms also consider cryptographic key management solutions.

Related

Enhancement of · Compliance (1)

  • NIST-SI-7 Software, Firmware, and Information Integrity NIST 800-53 control

Related control · Compliance (3)

  • NIST-CM-5 Access Restrictions for Change NIST 800-53 control
  • NIST-SC-12 Cryptographic Key Establishment and Management NIST 800-53 control
  • NIST-SC-13 Cryptographic Protection NIST 800-53 control