800-53|SI-7(13)

Title

CODE EXECUTION IN PROTECTED ENVIRONMENTS

Description

The organization allows execution of binary or machine-executable code obtained from sources with limited or no warranty and without the provision of source code only in confined physical or virtual machine environments and with the explicit approval of [Assignment: organization-defined personnel or roles].

Supplemental

This control enhancement applies to all sources of binary or machine-executable code including, for example, commercial software/firmware and open source software.

Reference Item Details

Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations

Category: SYSTEM AND INFORMATION INTEGRITY

Parent Title: SOFTWARE, FIRMWARE, AND INFORMATION INTEGRITY

Family: SYSTEM AND INFORMATION INTEGRITY

Audit Items

View all Reference Audit Items

Name	Plugin	Audit Name
1.120 WN10-CC-000080	Windows	CIS Microsoft Windows 10 STIG v1.0.0 CAT III
1.204 WN19-MS-000140	Windows	CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT I

Detections

Analytics