Prevent the automatic execution of mobile code in [software applications in which the automatic execution of mobile code is to be prevented are defined;] and enforce [actions to be enforced by the system prior to executing mobile code are defined;] prior to executing the code.
Supplemental
Actions enforced before executing mobile code include prompting users prior to opening email attachments or clicking on web links. Preventing the automatic execution of mobile code includes disabling auto-execute features on system components that employ portable storage devices, such as compact discs, digital versatile discs, and universal serial bus devices.