SC-18(4)

Prevent Automatic Execution

System and Communications Protection (SC)

Baselines

Low · Not includedModerate · Not includedHigh · Not included

Description

Prevent the automatic execution of mobile code in [assignment] and enforce [assignment] prior to executing the code.

Discussion

Actions enforced before executing mobile code include prompting users prior to opening email attachments or clicking on web links. Preventing the automatic execution of mobile code includes disabling auto-execute features on system components that employ portable storage devices, such as compact discs, digital versatile discs, and universal serial bus devices.

Implementation guidance

No content available.

CSF 2.0 crosswalk

No CSF mappings exist for this control.