SC-27 Platform-independent Applications
Guidance: nonePolicy clause: noneWhat these mean
sc27ctl| Baselines | Implementation level | Enhancements |
|---|---|---|
| Not in a baseline | System | None |
Related controls: SC-29
Control statement
Section titled “Control statement”Include within organizational systems the following platform independent applications: [Assignment: organization-defined platform-independent applications].
NIST discussion
Platforms are combinations of hardware, firmware, and software components used to execute software applications. Platforms include operating systems, the underlying computer architectures, or both. Platform-independent applications are applications with the capability to execute on multiple platforms. Such applications promote portability and reconstitution on different platforms. Application portability and the ability to reconstitute on different platforms increase the availability of mission-essential functions within organizations in situations where systems with specific operating systems are under attack.
Assessment objectives (SP 800-53A)
Section titled “Assessment objectives (SP 800-53A)”Objectives and methods for SC-27
Determine if [Assignment: organization-defined platform-independent applications] are included within organizational systems.
Examine: System and communications protection policy; procedures addressing platform-independent applications; system design documentation; system configuration settings and associated documentation; list of platform-independent applications; system audit records; system security plan; other relevant documents or records.
Interview: System/network administrators; organizational personnel with information security responsibilities; system developer.
Test: Mechanisms supporting and/or implementing platform-independent applications.
Independent guidance, not an official NIST publication. Control text is from NIST SP 800-53 Rev. 5 and SP 800-53A (public domain). Original content is licensed CC BY 4.0; program templates and the downloadable kit are dedicated to the public domain under CC0 1.0.