CCI-001196

Include system components that proactively seek to identify network-based malicious code or malicious websites.

Implementation Guidance

The organization being inspected/assessed includes components in the information system that proactively seek to identify malicious websites and/or web-based malicious code.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the software list to ensure the organization being inspected/assessed includes components in the information system that proactively seek to identify malicious websites and/or web-based malicious code.

Compelling Evidence

1.) Current signed and dated software list. 2.) System security plan (SSP).

The controls below (if any) were marked by NIST as being related to CCI-001196.