SI-3(1)—Malicious Code Protection

PBMM (P2)

Secret (P2)

Operational

>Control Description

MALICIOUS CODE PROTECTION | CENTRAL MANAGEMENT The organization centrally manages malicious code protection mechanisms.

>Supplemental Guidance

Central management is the organization-wide management and implementation of malicious code protection mechanisms. Central management includes planning, implementing, assessing, authorizing, and monitoring the organization-defined, centrally managed flaw malicious code protection security controls. Related controls: AU-2, SI-8.

>Tailoring Guidance

Control enhancements (1) and (2) ensure that malicious code mechanisms are centrally managed and that they are automatically updated so as to be effective.

Ask AI

Configure your API key to use AI features.