Navigate

• Top
• Description
• Related
• Enhancements
• CCIs

CM-7(2)

CM-7(2): Prevent Program Execution

The information system prevents program execution in accordance with [one or more of {{ insert: param, cm-7.2_prm_2 }} /rules authorizing the terms and conditions of software program usage].

Supplemental

CIA Levels
Confidentiality	high
Integrity	high
Availability	unknown

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to CM-7(2).

Control	Description
CM-8	The organization: a: Develops and documents an inventory of information system components that: 1: Accurately reflects the current information system; 2: Includes all components within the authorization boundary of the information system; 3: Is at the level of granularity deemed necessary for tracking and reporting; and 4: Includes [organization-defined information deemed necessary to achieve effective information system component accountability]; and b: Reviews and updates the information system component inventory [organization-defined frequency].
PM-5	The organization develops and maintains an inventory of its information systems.

Enhancements

The controls below (if any) add on to the requirements of CM-7(2).

Control	Description
No controls

Related CCIs

The CCIs below are tied to CM-7(2).

CCI	Definition
CCI-001592	Defines the rules authorizing the terms and conditions of software program usage on the system.
CCI-001763	Defines the policies regarding software program usage and restrictions.
CCI-001764	Prevent program execution in accordance with organization-defined policies, rules of behavior, and/or access agreements regarding software program usage and restrictions; rules authorizing the terms and conditions of software program usage.