An error occurred:

© 2024 Xylok, LLC

Version: v2024.10.3-0fa4-8a67

Navigate

CCI-001771

CCI-001771 Definition

The organization updates the list of unauthorized software programs per organization-defined frequency.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

Validation Procedures

Compelling Evidence

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-001771.

Control

Description

The organization:

CM-7 (4)(a): Identifies [Assignment: organization-defined software programs not authorized to execute on the information system];

CM-7 (4)(b): Employs an allow-all, deny-by-exception policy to prohibit the execution of unauthorized software programs on the information system; and

CM-7 (4)(c): Reviews and updates the list of unauthorized software programs [Assignment: organization-defined frequency].