CM-11(2): Prohibit Installation Without Privileged Status

Control Family:

Configuration Management

Parent Control:

CM-11: User-Installed Software

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

DE.CM-3

Threats Addressed:

Elevation of Privilege

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5.2.0:
CM-11(2): Software Installation with Privileged Status

Control Statement

The information system prohibits user installation of software without explicit privileged status.

Supplemental Guidance

Privileged status can be obtained, for example, by serving in the role of system administrator.