CCI-002565

The organization employs a detonation chamber (i.e., dynamic execution environments) capability within an organization-defined information system, system component, or location.

Implementation Guidance

The organization being inspected/assessed implements a detonation chamber (i.e., dynamic execution environments, sandbox) capability within an information system, system component, or location defined in SC-44, CCI 2564. The organization must maintain an audit trail of detonation chamber implementation.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented detonation chamber to ensure the organization being inspected/assessed employs a detonation chamber (i.e., dynamic execution environments, sandbox) capability within an information system, system component, or location defined in SC-44, CCI 2564.

Compelling Evidence

1.) Signed and dated Standard Operating Procedure (SOP). 2.) Concept of Operations (CONOP). 3.) System security plan (SSP) (reference "security" section).

The controls below (if any) were marked by NIST as being related to CCI-002565.