SC-18(1)
SC-18(1): Identify Unacceptable Code and Take Corrective Actions
Identify [unacceptable mobile code to be identified is defined;] and take [corrective actions to be taken when unacceptable mobile code is identified are defined;].
Supplemental
Corrective actions when unacceptable mobile code is detected include blocking, quarantine, or alerting administrators. Blocking includes preventing the transmission of word processing files with embedded macros when such macros have been determined to be unacceptable mobile code.
| CIA Levels | |
|---|---|
| Confidentiality | unknown |
| Integrity | low |
| Availability | unknown |
| Overlays |
|---|
| None |
| CSF Categories |
|---|
| None |