SC-34(3): Hardware-Based Protection

Control Family:

System And Communications Protection

Parent Control:

SC-34: Non-Modifiable Executable Programs

Priority:

P0: Security control not selected in any baseline.

Threats Addressed:

Tampering

Baselines:

(Not part of any baseline)

Control is withdrawn in the next version of this control set and incorporated into: SC-51: Hardware-based Protection.

Control Statement

The organization:

Employs hardware-based, write-protect for [Assignment: organization-defined information system firmware components]; and
Implements specific procedures for [Assignment: organization-defined authorized individuals] to manually disable hardware write-protect for firmware modifications and re-enable the write-protect prior to returning to operational mode.