SC-34(2)—Non-Modifiable Executable Programs
Technical
>Control Description
NON-MODIFIABLE EXECUTABLE PROGRAMS | INTEGRITY PROTECTION / READ-ONLY MEDIA The organization protects the integrity of information prior to storage on read-only media and controls the media after such information has been recorded onto the media.
>Supplemental Guidance
Security safeguards prevent the substitution of media into information systems or the reprogramming of programmable read-only media prior to installation into the systems. Security safeguards include, for example, a combination of prevention, detection, and response. Related controls: AC-5, CM-3, CM-5, CM-9, MP-2, MP-4, MP-5, SA-12, SC-28, SI-3.
Ask AI
Configure your API key to use AI features.