Navigate

• Top
• Description
• Related
• Enhancements
• CCIs

CM-7 (2)

CM-7 (2): Prevent Program Execution

The information system prevents program execution in accordance with [Selection (one or more): [Assignment: organization-defined policies regarding software program usage and restrictions]; rules authorizing the terms and conditions of software program usage].

Supplemental

None

CIA Levels
Confidentiality	low
Integrity	low
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to CM-7 (2).

Control	Description
CM-8	The organization: CM-8a.: Develops and documents an inventory of information system components that: CM-8a.1.: Accurately reflects the current information system; CM-8a.2.: Includes all components within the authorization boundary of the information system; CM-8a.3.: Is at the level of granularity deemed necessary for tracking and reporting; and CM-8a.4.: Includes [Assignment: organization-defined information deemed necessary to achieve effective information system component accountability]; and CM-8b.: Reviews and updates the information system component inventory [Assignment: organization-defined frequency].
PM-5	The organization develops and maintains an inventory of its information systems.

Enhancements

The controls below (if any) add on to the requirements of CM-7 (2).

Control	Description
No controls

Related CCIs

The CCIs below are tied to CM-7 (2).

CCI	Definition
CCI-001592	The organization defines the rules authorizing the terms and conditions of software program usage on the information system.
CCI-001763	The organization defines the policies regarding software program usage and restrictions.
CCI-001764	The information system prevents program execution in accordance with organization-defined policies regarding software program usage and restrictions, and/or rules authorizing the terms and conditions of software program usage.