id: "SC-18(03)" title: "Prevent Downloading and Execution" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-18.03" priority: "P1" implementation_level: "system" parent: "SC-18" enhancement: True


Statement

Prevent the download and execution of {{ insert: param, sc-18.03_odp }}.

Guidance

None.

Assessment Objective: the download of {{ insert: param, sc-18.03_odp }} is prevented;

Assessment Objective: the execution of {{ insert: param, sc-18.03_odp }} is prevented.

System and communications protection policy

procedures addressing mobile code

mobile code usage restrictions

mobile code implementation policy and procedures

system design documentation

system configuration settings and associated documentation

system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

system developer

organizational personnel with responsibilities for managing mobile code

Mechanisms preventing the download and execution of unacceptable mobile code