SC-18(5): Allow Execution Only In Confined Environments

Control Family:

System And Communications Protection

Parent Control:

SC-18: Mobile Code

Priority:

P2: Implement P2 security controls after implementation of P1 controls.

CSF v1.1 References:

DE.CM-5

Threats Addressed:

Elevation of Privilege

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
SC-18(5): Allow Execution Only in Confined Environments

Control Statement

The organization allows execution of permitted mobile code only in confined virtual machine environments.