Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/Configuration Management/262 of 1011

CM-07 (08)Least Functionality | Binary or Machine Executable Code

Control family: Configuration Management

Control description

(a) Prohibit the use of binary or machine-executable code from sources with limited or no warranty or without the provision of source code; and

(b) Allow exceptions only for compelling mission or operational requirements and with the approval of the authorizing official.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.