Installation and execution of unauthorized software are prevented
Parent: PR.PS
Description
No description available.
Mapped SPARTA techniques
4 techniques
Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records DE-0003.03 against CM-7 Least Functionality, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-05. Through SPARTA: SPARTA's catalog maps DE-0003.03 to countermeasure CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-05. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.
Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records DE-0003.07 against CM-7 Least Functionality, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-05. Through SPARTA: SPARTA's catalog maps DE-0003.07 to countermeasure CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-05. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.
Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records IA-0004.02 against CM-7 Least Functionality, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-05. Through SPARTA: SPARTA's catalog maps IA-0004.02 to countermeasure CM0014 Secure boot; CM0021 Software Digital Signature; CM0028 Tamper Protection, and that countermeasure's own CSF references include PR.PS-05. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.
Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records PER-0002.01 against CM-7 Least Functionality, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-05. Through SPARTA: SPARTA's catalog maps PER-0002.01 to countermeasure CM0028 Tamper Protection, and that countermeasure's own CSF references include PR.PS-05. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.
Cross-framework references
Relationships published by the source frameworks themselves, reproduced here with attribution. They are not SafeMode Space mappings and carry no confidence rating of ours.
Crosswalks to 2 in NIST SP 800-53 Rev. 5
Cite as SafeMode Space, csf-2-0 PR.PS-05.