CCI-002509

Employ hardware-based, write-protect for organization-defined information system firmware components.

Implementation Guidance

The organization being inspected/assessed employs hardware-based, write-protect for information system firmware components defined in SC-34 (3), CCI 2508.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines any applicable evidence of hardware-based, write-protect to ensure the organization being inspected/assessed employs hardware-based, write-protect for information system firmware components defined in SC-34 (3), CCI 2508.

Compelling Evidence

1.) Signed and dated Standard Operating Procedure (SOP). 2.) Concept of Operations (CONOP). 3.) Configuration guide (reference "hardware-enforced" section).

The controls below (if any) were marked by NIST as being related to CCI-002509.