SI-07(15) Code Authentication
All changes in this version
Title
Code Authentication
Control
Implement cryptographic mechanisms to authenticate the following software or firmware components prior to installation: [Assignment: software or firmware components].
Discussion
Cryptographic authentication includes verifying that software or firmware components have been digitally signed using certificates recognized and approved by organizations. Code signing is an effective method to protect against malicious code. Organizations that employ cryptographic mechanisms also consider cryptographic key management solutions.
Parameters
si-07.15_odp: software or firmware components
Related controls
cm-5, sc-12, sc-13
Assessment objective
SI-07(15) cryptographic mechanisms are implemented to authenticate [Assignment: software or firmware components] prior to installation.
STIG rules that implement this control 0
No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).