CM-07.9 ยท Prohibiting The Use of Unauthorized Hardware

Control Description

Identify {{ insert: param, cm-07.09_odp.01 }}; Prohibit the use or connection of unauthorized hardware components; Review and update the list of authorized hardware components {{ insert: param, cm-07.09_odp.02 }}.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Assurance
Enhancement
Control Statement
The control requirements

(a) Identify {{ insert: param, cm-07.09_odp.01 }};

(b) Prohibit the use or connection of unauthorized hardware components;

(c) Review and update the list of authorized hardware components {{ insert: param, cm-07.09_odp.02 }}.

Supplemental Guidance

Hardware components provide the foundation for organizational systems and the platform for the execution of authorized software programs. Managing the inventory of hardware components and controlling which hardware components are permitted to be installed or connected to organizational systems is essential in order to provide adequate security.