SC-18(01) Identify Unacceptable Code and Take Corrective Actions
NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
All changes in this version
Title
Identify Unacceptable Code and Take Corrective Actions
Control
Identify [Assignment: unacceptable mobile code] and take [Assignment: corrective actions].
Discussion
Corrective actions when unacceptable mobile code is detected include blocking, quarantine, or alerting administrators. Blocking includes preventing the transmission of word processing files with embedded macros when such macros have been determined to be unacceptable mobile code.
Parameters
sc-18.01_odp.01: unacceptable mobile code
sc-18.01_odp.02: corrective actions
STIG rules that implement this control 10
Application Security and Development V6R5
- APSC-DV-002870 CAT II Unsigned Category 1A mobile code must not be used in the application in accordance with DoW policy.
Google Chrome Current Windows V2R11
- DTBC-0002 CAT II Site tracking users location must be disabled.
- DTBC-0038 CAT II Safe Browsing must be enabled.
- DTBC-0057 CAT II Safe Browsing Extended Reporting must be disabled.
- DTBC-0066 CAT II Anonymized data collection must be disabled.
- DTBC-0067 CAT II Collection of WebRTC event logs must be disabled.
- DTBC-0069 CAT II Guest Mode must be disabled.
- DTBC-0070 CAT II AutoFill for credit cards must be disabled.
- DTBC-0071 CAT II AutoFill for addresses must be disabled.
- DTBC-0072 CAT II Import AutoFill form data must be disabled.