Detections
Analytics
800-53|SC-34
Title
NON-MODIFIABLE EXECUTABLE PROGRAMSDescription
The information system at [Assignment: organization-defined information system components]:Supplemental
The term operating environment is defined as the specific code that hosts applications, for example, operating systems, executives, or monitors including virtual machine monitors (i.e., hypervisors). It can also include certain applications running directly on hardware platforms. Hardware-enforced, read-only media include, for example, Compact Disk-Recordable (CD-R)/Digital Video Disk-Recordable (DVD-R) disk drives and one-time programmable read-only memory. The use of non-modifiable storage ensures the integrity of software from the point of creation of the read-only image. The use of reprogrammable read-only memory can be accepted as read-only media provided: (i) integrity can be adequately protected from the point of initial writing to the insertion of the memory into the information system; and (ii) there are reliable hardware protections against reprogramming the memory while installed in organizational information systems.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: AC-3,SI-7
Category: SYSTEM AND COMMUNICATIONS PROTECTION
Family: SYSTEM AND COMMUNICATIONS PROTECTION
Priority: P0
Audit Items
View all Reference Audit Items