CCI-001167

Verify that the development of mobile code to be deployed in information systems meets organization-defined mobile code requirements.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to develop mobile code IAW the requirements defined in CCI 1168.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed develops mobile code IAW the requirements defined in CCI 1168.

Compelling Evidence

1.) Signed and dated Software Configuration Management (SCM) plan that describes how the development of mobile code to be deployed in information systems, meets organization-defined mobile code requirements. 2.) Organization's mobile code requirements.

The controls below (if any) were marked by NIST as being related to CCI-001167.