Overview
  1. ⚪03.01: Access Control
  2. ⚪03.02: Awareness and Training
  3. ⚪03.03: Audit and Accountability
  4. ⚪03.04: Configuration Management
  5. ⚪03.05: Identification and Authentication
  6. ⚪03.06: Incident Response
  7. ⚪03.07: Maintenance
  8. ⚪03.08: Media Protection
  9. ⚪03.09: Personnel Security
  10. ⚪03.10: Physical Protection
  11. ⚪03.11: Risk Assessment
  12. ⚪03.12: Security Assessment
  13. ⚪03.13: System and Communications Protection
  14. ⚪03.14: System and Information Integrity

Security Requirements for 03.07.04 Media Inspection⚪

If, upon inspection of media containing maintenance diagnostic and test programs, organizations determine that the media contain malicious code, the incident is handled consistent with incident handling policies and procedures.

Evidence

  1. ⚪

    03.07.04.a

    Media containing diagnostic and test programs are checked for malicious code before being used in organizational systems that process, store, or transmit cui