Navigate

CM-7(2)

CM-7(2): Prevent Program Execution

The information system prevents program execution in accordance with [one or more of " {{ insert: param, cm-7.2_prm_2 }} "/"rules authorizing the terms and conditions of software program usage"].

Supplemental

CIA Levels
Confidentiality	low
Integrity	low
Availability	unknown

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to CM-7(2).

Control	Description
CM-8	The organization: a: Develops and documents an inventory of information system components that: 1: Accurately reflects the current information system; 2: Includes all components within the authorization boundary of the information system; 3: Is at the level of granularity deemed necessary for tracking and reporting; and 4: Includes [one of ]; and b: Reviews and updates the information system component inventory [one of ].
PM-5	The organization develops and maintains an inventory of its information systems.

Control

Description

CM-8

The organization:

a: Develops and documents an inventory of information system components that:
- 1: Accurately reflects the current information system;
- 2: Includes all components within the authorization boundary of the information system;
- 3: Is at the level of granularity deemed necessary for tracking and reporting; and
- 4: Includes [one of ]; and

b: Reviews and updates the information system component inventory [one of ].

PM-5

The organization develops and maintains an inventory of its information systems.

Enhancements

The controls below (if any) add on to the requirements of CM-7(2).

Control	Description
No controls

Related CCIs

The CCIs below are tied to CM-7(2).

CCI	Definition
CCI-001592	Defines the rules authorizing the terms and conditions of software program usage on the system.
CCI-001763	Defines the policies regarding software program usage and restrictions.
CCI-001764	Prevent program execution in accordance with organization-defined policies, rules of behavior, and/or access agreements regarding software program usage and restrictions; rules authorizing the terms and conditions of software program usage.