Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/Configuration Management/261 of 1011

CM-07 (07)Least Functionality | Code Execution in Protected Environments

Control family: Configuration Management

Control description

Allow execution of binary or machine-executable code only in confined physical or virtual machine environments and with the explicit approval of [Assignment: organization-defined personnel or roles] when such code is:

(a) Obtained from sources with limited or no warranty; and/or

(b) Without the provision of source code.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.