Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/System and Communications Protection/848 of 1011

SC-34Non-modifiable Executable Programs

Control family: System and Communications Protection

Control description

For [Assignment: organization-defined system components], load and execute:

a. The operating environment from hardware-enforced, read-only media; and

b. The following applications from hardware-enforced, read-only media: [Assignment: organization-defined applications].

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.