SI-3(4)
SI-3(4): Updates Only by Privileged Users
Update malicious code protection mechanisms only when directed by a privileged user.
Supplemental
Protection mechanisms for malicious code are typically categorized as security-related software and, as such, are only updated by organizational personnel with appropriate access privileges.
| CIA Levels | |
|---|---|
| Confidentiality | unknown |
| Integrity | unknown |
| Availability | unknown |
| Overlays |
|---|
| CDS - Access, CDS - Multilevel, CDS - Transfer |
| CSF Categories |
|---|
| None |