Navigate

CCI-002734

CCI-002734 Definition

Defines the personnel or roles which have the authority to explicitly approve binary or machine-executable code.

Status
Type	CheckType.policy

Master Assessment Datasheet

Implementation Guidance

DoD has defined has personnel or roles as the ISSO or ISSM.

Validation Procedures

The organization being inspected/assessed is automatically compliant with this CCI because they are covered at the DoD level. DoD has defined has personnel or roles as the ISSO or ISSM.

Compelling Evidence

Automatically compliant.

Related Controls

The controls below (if any) were marked by NIST as being related to CCI-002734.

Control	Description
SI-7(13)	The organization allows execution of binary or machine-executable code obtained from sources with limited or no warranty and without the provision of source code only in confined physical or virtual machine environments and with the explicit approval of [organization-defined personnel or roles].