CCI-003992

Prevent the installation of organization-defined software and firmware components without verification that the component has been digitally signed using a certificate that is recognized and approved by the organization.

Implementation Guidance

Validation Procedures

Compelling Evidence

The controls below (if any) were marked by NIST as being related to CCI-003992.