SC-34.1 ยท No Writable Storage

Control Description

Employ {{ insert: param, sc-34.01_odp }} with no writeable storage that is persistent across component restart or power on/off.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
organization
Assurance
Enhancement
Control Statement
The control requirements

Employ {{ insert: param, sc-34.01_odp }} with no writeable storage that is persistent across component restart or power on/off.

Supplemental Guidance

Disallowing writeable storage eliminates the possibility of malicious code insertion via persistent, writeable storage within the designated system components. The restriction applies to fixed and removable storage, with the latter being addressed either directly or as specific restrictions imposed through access controls for mobile devices.

Related NIST Controls
Other NIST 800-53 controls related to this one