PR.PS: Platform Security
Category is new to this version of the framework.
Description
The hardware, software (e.g., firmware, operating systems, applications), and services of physical and virtual platforms are managed consistent with the organization's risk strategy to protect their confidentiality, integrity, and availability
Framework Subcategories
PR.PS-01: Configuration management practices are established and applied
[csf.tools Note: Subcategories do not have detailed descriptions.]
PR.PS-02: Software is maintained, replaced, and removed commensurate with risk
[csf.tools Note: Subcategories do not have detailed descriptions.]
PR.PS-03: Hardware is maintained, replaced, and removed commensurate with risk
[csf.tools Note: Subcategories do not have detailed descriptions.]
PR.PS-04: Log records are generated and made available for continuous monitoring
[csf.tools Note: Subcategories do not have detailed descriptions.]
PR.PS-05: Installation and execution of unauthorized software are prevented
[csf.tools Note: Subcategories do not have detailed descriptions.]
PR.PS-06: Secure software development practices are integrated, and their performance is monitored throughout the software development life cycle
[csf.tools Note: Subcategories do not have detailed descriptions.]