Skip to main content

💼 CM-7(2) Prevent Program Execution (M)(H)

  • Contextual name: 💼 CM-7(2) Prevent Program Execution (M)(H)
  • ID: /frameworks/fedramp-moderate-security-controls/cm/07/02
  • Located in: 💼 CM-7 Least Functionality (L)(M)(H)

Description​

Prevent program execution in accordance with [Selection (one-or-more): [Assignment: organization-defined policies, rules of behavior, and/or access agreements regarding software program usage and restrictions]; rules authorizing the terms and conditions of software program usage].

CM-7 (2) Additional FedRAMP Requirements and Guidance:

Guidance: This control refers to software deployment by CSP personnel into the production environment. The control requires a policy that states conditions for deploying software. This control shall be implemented in a technical manner on the information system to only allow programs to run that adhere to the policy (i.e. allow-listing). This control is not to be based off of strictly written policy on what is allowed or not allowed to run.

Similar​

  • Sections
    • /frameworks/fedramp-high-security-controls/cm/07/02
  • Internal
    • ID: dec-c-86b0755e

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 FedRAMP High Security Controls → 💼 CM-7(2) Prevent Program Execution (M)(H)

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags