Navigate

CCI-002509

CCI-002509 Definition

The organization employs hardware-based, write-protect for organization-defined information system firmware components.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed employs hardware-based, write-protect for information system firmware components defined in SC-34 (3), CCI 2508.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines any applicable evidence of hardware-based, write-protect to ensure the organization being inspected/assessed employs hardware-based, write-protect for information system firmware components defined in SC-34 (3), CCI 2508.

Compelling Evidence

1.) Signed and dated Standard Operating Procedure (SOP). 2.) Concept of Operations (CONOP). 3.) Configuration guide (reference "hardware-enforced" section).

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002509.

Control	Description
SC-34 (3)	The organization: SC-34 (3)(a): Employs hardware-based, write-protect for [Assignment: organization-defined information system firmware components]; and SC-34 (3)(b): Implements specific procedures for [Assignment: organization-defined authorized individuals] to manually disable hardware write-protect for firmware modifications and re-enable the write-protect prior to returning to operational mode.

Control

Description

SC-34 (3)

The organization:

SC-34 (3)(a): Employs hardware-based, write-protect for [Assignment: organization-defined information system firmware components]; and

SC-34 (3)(b): Implements specific procedures for [Assignment: organization-defined authorized individuals] to manually disable hardware write-protect for firmware modifications and re-enable the write-protect prior to returning to operational mode.