CCI-002565

Employ a detonation chamber capability within an organization-defined system, system component, or location.

Implementation Guidance

The organization being inspected/assessed implements a detonation chamber (i.e., dynamic execution environments, sandbox) capability within an information system, system component, or location defined in SC-44, CCI 2564. The organization must maintain an audit trail of detonation chamber implementation.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented detonation chamber to ensure the organization being inspected/assessed employs a detonation chamber (i.e., dynamic execution environments, sandbox) capability within an information system, system component, or location defined in SC-44, CCI 2564.

Compelling Evidence

1.) Signed and dated Standard Operating Procedure (SOP). 2.) Concept of Operations (CONOP). 3.) System security plan (SSP) (reference "security" section).

The controls below (if any) were marked by NIST as being related to CCI-002565.