id: "CM-11(02)" title: "Software Installation with Privileged Status" family: "CM" family_name: "Configuration Management" sort_id: "cm-11.02" priority: "P1" implementation_level: "system" parent: "CM-11" enhancement: True
Statement
Allow user installation of software only with explicit privileged status.
Guidance
Privileged status can be obtained, for example, by serving in the role of system administrator.
Assessment Objective
user installation of software is allowed only with explicit privileged status.
Configuration management policy
procedures addressing user-installed software
configuration management plan
system security plan
system design documentation
system configuration settings and associated documentation
alerts/notifications of unauthorized software installations
system audit records
continuous monitoring strategy
system security plan
other relevant documents or records
Organizational personnel with responsibilities for governing user-installed software
organizational personnel operating, using, and/or maintaining the system
organizational personnel with information security responsibilities
system/network administrators
Organizational processes governing user-installed software on the system
mechanisms for prohibiting installation of software without privileged status (e.g., access controls)