CCI-001688

Verify the acquisition of mobile code deployed in the system meets organization-defined mobile code requirements.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to acquire mobile code IAW the requirements defined in CCI 1168.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed acquire mobile code IAW the requirements defined in CCI 1168.

Compelling Evidence

1.) Signed and dated Software Configuration Management (SCM) plan that describes how the site ensures the acquisition of mobile code to be deployed in information systems meets organization-defined mobile code requirements. 2.) Organization's mobile code requirements.

The controls below (if any) were marked by NIST as being related to CCI-001688.