CCI-001196

The information system includes components that proactively seek to identify malicious websites and/or web-based malicious code.

Implementation Guidance

The organization being inspected/assessed includes components in the information system that proactively seek to identify malicious websites and/or web-based malicious code.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the software list to ensure the organization being inspected/assessed includes components in the information system that proactively seek to identify malicious websites and/or web-based malicious code.

Compelling Evidence

1.) Current signed and dated software list. 2.) System security plan (SSP).

The controls below (if any) were marked by NIST as being related to CCI-001196.