SC-18(1)

Requirement

Identify [Assignment: organization-defined unacceptable mobile code] and take [Assignment: organization-defined corrective actions].

Discussion

Corrective actions when unacceptable mobile code is detected include blocking, quarantine, or alerting administrators. Blocking includes preventing the transmission of word processing files with embedded macros when such macros have been determined to be unacceptable mobile code.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and communications protection policy; procedures addressing mobile code; mobile code usage restrictions; mobile code implementation policy and procedures; system design documentation; system configuration settings and associated documentation; list of unacceptable mobile code; list of corrective actions to be taken when unacceptable mobile code is identified; system monitoring records; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; system developer; organizational personnel with responsibilities for managing mobile code].

Test

[SELECT FROM: Mechanisms supporting and/or implementing mobile code detection, inspection, and corrective capabilities].

ID	Assessment Objectives
SC-18(01)[01]	<SC-18(01)_ODP[01] unacceptable mobile code> is identified;
SC-18(01)[02]	<SC-18(01)_ODP[02] corrective actions> are taken if unacceptable mobile code is identified.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!