CCI-001168

Implementation Guidance

The organization being inspected/assessed defines and documents requirements for the acquisition, development, and use of mobile code. The requirements must result in the acquisition and development of mobile code which complies with the Protection Profile for Web Browsers and Application SRG. DoD has determined the requirements are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented requirements to ensure the organization being inspected/assessed defines requirements for the acquisition, development, and use of mobile code. DoD has determined the requirements are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated Software Configuration Management (SCM) plan that defines requirements for the acquisition, development, and use of mobile code.