CM-7(5)
Least Functionality | Authorized Software - Allow-by-exception
Control text
The control number, title and every cross-reference on this page are public. The official control text is available to signed-in users.
Create a free account or log in to read the full text of CM-7(5) (requirement, discussion, assessment objective).
Related controls
Other reference-standard controls mapped to this one, each with the owner's words for the relationship and the official document that states it.
- 03.04.08Authorized Software – Allow by Exception
“Source control” about 03.04.08 · NIST SP 800-171 Rev 3 (OSCAL), control 03.04.08 link rel=reference (CM-07(05))
- CM-7 (5)LEAST FUNCTIONALITY | AUTHORIZED SOFTWARE / WHITELISTING
“Changes title Changes discussion” about CM-7 (5) · NIST SP 800-53 Rev 4 → Rev 5 comparison, sheet "Rev4 Rev5 Compared" row 307
- CM-2(5)Authorized Software
“Incorporated into” about CM-2(5) · NIST SP 800-53 Rev 5 (OSCAL, release 5.2.0), control CM-2(5) link rel=incorporated-into
Source: NIST · https://csrc.nist.gov/pubs/sp/800/53/r5/final