CCI-002461
CCI-002461 Definition
Allow execution of permitted mobile code only in confined virtual machine environments.
| Status | |
| Type | CheckType.policy |
Master Assessment Datasheet
Implementation Guidance
The organization being inspected/assessed documents within the system and communications protection policy and implements mechanisms to allow the execution of permitted mobile code only in confined virtual machine environments. Unacceptable mobile code is defined in SC-18 (3).
Validation Procedures
The organization conducting the inspection/assessment obtains and examines the system and communications protection policy and inspects the information systems to ensure the organization being inspected/assessed implements mechanisms to allow the execution of permitted mobile code only in confined virtual machine environments.
Compelling Evidence
1.) Signed and dated communications protection policy.