CCI-002632

The organization defines the remote commands that are to be authenticated using organization-defined safeguards for malicious code protection.

Implementation Guidance

The organization being inspected/assessed defines and documents the remote commands that are to be authenticated using organization-defined safeguards for malicious code protection. DoD has determined the remote commands are not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented remote commands to ensure the organization being inspected/assessed defines the remote commands that are to be authenticated using organization-defined safeguards for malicious code protection. DoD has determined the remote commands are not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated system security plan defines remote commands that are to be authenticated using organization-defined safeguards for malicious code protection.

The controls below (if any) were marked by NIST as being related to CCI-002632.