NIST SP 800-171 & CMMC 2.0 Control 3.13.13 Requirement:
Control and monitor the use of mobile code.
NIST SP 800-171 & CMMC 2.0 3.13.13 Requirement Explanation:
Mobile code technologies include Java, JavaScript, ActiveX, Postscript, PDF, Flash animations, and VBScript. Malware is often delivered via mobile code, hence it's use must be controlled.
Example NIST SP 800-171 & CMMC 2.0 3.13.13 Implementation:
Deploy DISA STIG settings for your web browsers. These settings include controls on the execution of mobile code.
NIST SP 800-171 & CMMC 2.0 3.13.13 Scenario(s):
- Scenario 1:
Your company deployed DISA STIG settings to secure it's Microsoft Edge browsers. The settings include controls restricting the execution of mobile code such as ActiveX and JavaScript. When a user visits a site that wants to execute ActiveX it is automatically blocked. The user is given the option to allow the activeX code to run. This is in accordance with your documented mobile code policy.
Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:
Compliance Accelerator
Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.
Quantum Assessor
Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.
Supply Chain Verifier
Trust is everything. Verify, monitor, and support subcontactor compliance.