CMMC 1.0 Practice SC.3.188 Requirement:
Control and monitor the use of mobile code.
CMMC 1.0 SC.3.188 Requirement Explanation:
Malware is often delivered via mobile code, hence it's use must be controlled. Examples of mobile code include Java, JavaScript, ActiveX, Postscript, PDF, Shockwave, Flash animations, and VBScript.
Example CMMC 1.0 SC.3.188 Implementation:
Deploy DISA STIG settings for your browsers, Java applications (JRE) and PDF readers (Acrobat). The DISA STIG settings will improve your security and control mobile code. Make sure that you are blocking the execution of mobile code. You can set options that allow users to run mobile code on their systems. Document your settings in the DISA STIG viewer.
CMMC 1.0 SC.3.188 Scenario(s):
- Scenario 1:
Your policy requires that mobile code is blocked and allowed by exception. You trust your users to use their judgement when allowing mobile code. Your company deployed DISA STIG settings to secure it's browsers. The settings include controls restricting the execution of mobile code such as ActiveX and JavaScript. When a user visits a site that wants to execute ActiveX it is blocked unless the user allows it. This is in accordance with your documented mobile code policy.
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you
NIST SP 800-171 & CMMC Compliance
Become compliant, provide compliance services, or verify partner compliance with NIST SP 800-171 and CMMC requirements.
HIPAA Compliance
Become compliant, provide compliance services, or verify partner compliance with HIPAA security rule requirements.
FAR 52.204-21 Compliance
Become compliant, provide compliance services, or verify partner compliance with FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems requirements.
ISO 27001 Compliance
Become compliant, provide compliance services, or verify partner compliance with ISO 27001 requirements.