id: "SC-27" title: "Platform-independent Applications" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-27" priority: "P1" implementation_level: "system"
Statement
Include within organizational systems the following platform independent applications: {{ insert: param, sc-27_odp }}.
Guidance
Platforms are combinations of hardware, firmware, and software components used to execute software applications. Platforms include operating systems, the underlying computer architectures, or both. Platform-independent applications are applications with the capability to execute on multiple platforms. Such applications promote portability and reconstitution on different platforms. Application portability and the ability to reconstitute on different platforms increase the availability of mission-essential functions within organizations in situations where systems with specific operating systems are under attack.
Assessment Objective
{{ insert: param, sc-27_odp }} are included within organizational systems.
System and communications protection policy
procedures addressing platform-independent applications
system design documentation
system configuration settings and associated documentation
list of platform-independent applications
system audit records
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
system developer
Mechanisms supporting and/or implementing platform-independent applications