CCI-002731

The organization requires that organization-defined user-installed software execute in a confined physical or virtual machine environment with limited privileges.

Implementation Guidance

The organization being inspected/assessed requires that user-installed software defined in SI-7 (11), CCI 2730 execute in a confined physical or virtual machine environment with limited privileges.

Validation Procedures

The organization conducting the inspection/assessment examines the information system to ensure that software defined in SI-7 (11), CCI 2730 executes in a confined physical or virtual machine environment with limited privileges.

Compelling Evidence

1.) Signed and dated System security plan. 2.) Software documentation defined in SI-7 (11), CCI 2730 executes in a confined physical or virtual machine environment with limited privileges.

The controls below (if any) were marked by NIST as being related to CCI-002731.