V-222516
Application Security and Development Security Technical Implementation Guide
Title
The application must prevent program execution in accordance with organization-defined policies regarding software program usage and restrictions, and/or rules authorizing the terms and conditions of software program usage.
Description
<VulnDiscussion>Control of application execution is a mechanism used to prevent execution of unauthorized applications in order to follow the rules of least privilege. Some applications may provide a capability that runs counter to the mission or provides users with functionality that exceeds mission requirements. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions). Removal of executable pro...
Fix Text (Documentation Requirement)
Restrict application execution in accordance with the policy, terms, and conditions specified.