|
CM-7 (5) Control Enhancement (H)
|
| Page | 174/478 | | Date | 16.12.2020 | | Size | 1.2 Mb. | | #54609 |
| FedRAMP-SSP-High-Baseline-Template FedRAMP-SSP-High-Baseline-Template, North Carolina Summary Table of Ecoregion Characteristics CM-7 (5) Control Enhancement (H)
The organization:
Identifies [Assignment: organization-defined software programs authorized to execute on the information system];
Employs a deny-all, permit-by-exception policy to allow the execution of authorized software programs on the information system; and
Reviews and updates the list of authorized software programs [FedRAMP Assignment: at least quarterly or when there is a change].
CM-7 (5)
|
Control Summary Information
|
Responsible Role:
|
Parameter CM-7 (5)(a):
|
Parameter CM-7 (5)(c):
|
Implementation Status (check all that apply):
☐ Implemented
☐ Partially implemented
☐ Planned
☐ Alternative implementation
☐ Not applicable
|
Control Origination (check all that apply):
☐ Service Provider Corporate
☐ Service Provider System Specific
☐ Service Provider Hybrid (Corporate and System Specific)
☐ Configured by Customer (Customer System Specific)
☐ Provided by Customer (Customer System Specific)
☐ Shared (Service Provider and Customer Responsibility)
☐ Inherited from pre-existing FedRAMP Authorization for Click here to enter text. ,
|
CM-7 (5) What is the solution and how is it implemented?
|
Part a
|
|
Part b
|
|
Part c
|
|
Share with your friends: |
|
|
