Navigate

CCI-002638

CCI-002638 Definition

Employ organization-defined techniques to analyze the characteristics and behavior of malicious code.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

The organization being inspected/assessed documents and implements techniques defined in SI-3 (10), CCI 2635 to analyze the characteristics and behavior of malicious code.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented techniques to ensure the organization being inspected/assessed employs techniques defined in SI-3 (10), CCI 2635 to analyze the characteristics and behavior of malicious code.

Compelling Evidence

1.) Implementation documentation of techniques defined in SI-3 (10), CCI 2635 to analyze the characteristics and behavior of malicious code.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002638.

Control	Description
SI-3(10)	The organization: (a): Employs [one of ] to analyze the characteristics and behavior of malicious code; and (b): Incorporates the results from malicious code analysis into organizational incident response and flaw remediation processes.