With 205 Controls, 423 enhancements and 1,394 definitions, it's overwhelming! Lucky for you, ISL's Cyber Security Professionals are here to help.

Contact us so we can discuss what Cyber Security controls mean to your organization.

SA-7 : USER-INSTALLED SOFTWARE

FAMILY: System and Services AcquisitionCLASS: Management

SA-7 : USER-INSTALLED SOFTWARE

The organization enforces explicit rules governing the installation of software by users. If provided the necessary privileges, users have the ability to install software. The organization identifies what types of software installations are permitted (e.g., updates and security patches to existing software) and what types of installations are prohibited (e.g., software whose pedigree with regard to being potentially malicious is unknown or suspect). Related control: CM-2.
Control Enhancements:
References: None.
Priority and Baseline Allocation:
P1 LOW SA-7 MOD SA-7 HIGH SA-7