id: "CM-07(02)" title: "Prevent Program Execution" family: "CM" family_name: "Configuration Management" sort_id: "cm-07.02" priority: "P1" implementation_level: "system" parent: "CM-07" enhancement: True
Statement
Prevent program execution in accordance with {{ insert: param, cm-07.02_odp.01 }}.
Guidance
Prevention of program execution addresses organizational policies, rules of behavior, and/or access agreements that restrict software usage and the terms and conditions imposed by the developer or manufacturer, including software licensing and copyrights. Restrictions include prohibiting auto-execute features, restricting roles allowed to approve program execution, permitting or prohibiting specific software programs, or restricting the number of program instances executed at the same time.
Assessment Objective
program execution is prevented in accordance with {{ insert: param, cm-07.02_odp.01 }}.
Configuration management policy
procedures addressing least functionality in the system
configuration management plan
system design documentation
system configuration settings and associated documentation
system component inventory
common secure configuration checklists
specifications for preventing software program execution
change control records
system audit records
system security plan
other relevant documents or records
Organizational personnel with information security responsibilities
system/network administrators
system developers
Organizational processes preventing program execution on the system
organizational processes for software program usage and restrictions
mechanisms preventing program execution on the system
mechanisms supporting and/or implementing software program usage and restrictions