NIST 800-171 v2
110 security requirements available
3.13.13Derived Requirement
System and Communications Protection
Security Requirement
Control and monitor the use of mobile code.
Discussion
Mobile code technologies include Java, JavaScript, ActiveX, Postscript, PDF, Flash animations, and VBScript. Decisions regarding the use of mobile code in organizational systems are based on the potential for the code to cause damage to the systems if used maliciously. Usage restrictions and implementation guidance apply to the selection and use of mobile code installed on servers and mobile code downloaded and executed on individual workstations, notebook computers, and devices (e.g., smart phones). Mobile code policy and procedures address controlling or preventing the development, acquisition, or introduction of unacceptable mobile code in systems, including requiring mobile code to be digitally signed by a trusted source. [SP 800-28] provides guidance on mobile code.
- Framework
- NIST SP 800-171 Rev 2
- Family
- System and Communications Protection
- Requirement Type
- derived
Related Frameworks
25 paths across 3 frameworks
Related Frameworks
SCF1 mapping
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- Secure Controls Framework · 2026.2 · scf_strm · related
NIST 800-531 mapping
SC-18
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI23 mappings
CCI-001160
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001161
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001162
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001163
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001164
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001165
1.00
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001197
0.50
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- Secure Controls Framework · 2026.2 · scf_strm · related
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001198
0.50
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- Secure Controls Framework · 2026.2 · scf_strm · related
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001166
0.25
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- Secure Controls Framework · 2026.2 · scf_strm · related
- Secure Controls Framework · 2026.2 · scf_strm · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-001167
0.25
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
- Secure Controls Framework · 2026.2 · scf_strm · related
- Secure Controls Framework · 2026.2 · scf_strm · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
+13 more (top 10 by confidence shown)
Related STIGs
52 STIGs reach this control through 22 CCIs via 800-53 control SC-18. Expand a row to see the responsible NICE and O*NET roles.
Operating System - Server
4 STIGs
Operating System - Server
4 STIGsSolaris 11 SPARC Security Technical Implementation Guide
32025-05-053 of 217 findings match
M3
Solaris 11 SPARC Security Technical Implementation Guide
V3R52026-02-193 of 217 findings match
M3
Solaris 11 X86 Security Technical Implementation Guide
32025-05-052 of 216 findings match
M2
Solaris 11 X86 Security Technical Implementation Guide
V3R52026-02-192 of 216 findings match
M2
Operating System - Mainframe
2 STIGs
Operating System - Mainframe
2 STIGsMainframe Product Security Requirements Guide
32024-12-056 of 193 findings match
M6
Mainframe Product Security Requirements Guide
V3R42025-09-106 of 194 findings match
M6
Network Device
8 STIGs
Network Device
8 STIGsApplication Layer Gateway Security Requirements Guide
22024-12-043 of 155 findings match
M3
Application Layer Gateway Security Requirements Guide
V2R32025-09-153 of 160 findings match
M3
Cisco ASA IPS Security Technical Implementation Guide
V2R12024-08-272 of 23 findings match
M2
F5 NGINX Security Technical Implementation Guide
V1R12026-01-072 of 32 findings match
M2
Juniper SRX Services Gateway IDPS Security Technical Implementation Guide
V2R12024-06-102 of 28 findings match
M2
Palo Alto Networks ALG Security Technical Implementation Guide
V3R42025-03-122 of 50 findings match
M2
Trend Micro TippingPoint IDPS Security Technical Implementation Guide
V2R22024-09-162 of 30 findings match
M2
Palo Alto Networks IDPS Security Technical Implementation Guide
V3R22024-12-191 of 29 findings match
M1
Web / Application Server
8 STIGs
Web / Application Server
8 STIGsApplication Security and Development Security Technical Implementation Guide
62025-02-122 of 286 findings match
M2
Application Security and Development Security Technical Implementation Guide
V6R42025-09-092 of 286 findings match
M2
Application Server Security Requirements Guide
42025-02-111 of 128 findings match
M1
Application Server Security Requirements Guide
V4R42025-09-101 of 137 findings match
M1
Microsoft IIS 10.0 Server Security Technical Implementation Guide
32025-06-111 of 43 findings match
M1
Microsoft IIS 10.0 Server Security Technical Implementation Guide
V3R72026-02-261 of 40 findings match
M1
Web Server Security Requirements Guide
42025-02-121 of 124 findings match
M1
Web Server Security Requirements Guide
V4R42025-09-101 of 126 findings match
M1
Endpoint Security Management
5 STIGs
Endpoint Security Management
5 STIGsMicrosoft Defender Antivirus Security Technical Implementation Guide
V2R82026-02-1742 of 67 findings match
M42
Microsoft Defender Antivirus Security Technical Implementation Guide
22022-04-0822 of 41 findings match
M22
Intrusion Detection and Prevention Systems Security Requirements Guide
32025-05-192 of 58 findings match
M2
Intrusion Detection and Prevention Systems Security Requirements Guide
V3R42025-09-222 of 60 findings match
M2
Microsoft Defender for Endpoint Security Technical Implementation Guide
V1R22025-11-251 of 25 findings match
M1
Productivity Application
5 STIGs
Productivity Application
5 STIGsMicrosoft Office 365 ProPlus Security Technical Implementation Guide
32025-03-0596 of 138 findings match
M96
Microsoft Office 365 ProPlus Security Technical Implementation Guide
V3R52026-02-1296 of 139 findings match
M96
Google Chrome Current Windows Security Technical Implementation Guide
V2R112025-05-1512 of 46 findings match
M11L1
Adobe Acrobat Reader DC Continuous Track Security Technical Implementation Guide
V2R12021-06-228 of 26 findings match
M8
Adobe Acrobat Professional DC Continuous Track Security Technical Implementation Guide
V2R12021-06-222 of 23 findings match
M2
Uncategorized
20 STIGs
Uncategorized
20 STIGsMicrosoft Defender Antivirus Security Technical Implementation Guide
V2R92026-05-0842 of 67 findings match
M42
Microsoft Excel 2016 Security Technical Implementation Guide
22024-02-2136 of 41 findings match
M36
Microsoft PowerPoint 2016 Security Technical Implementation Guide
12016-11-0232 of 37 findings match
M32
Microsoft Internet Explorer 11 Security Technical Implementation Guide
22023-12-0131 of 137 findings match
M31
Microsoft Word 2016 Security Technical Implementation Guide
12016-11-0229 of 34 findings match
M29
Microsoft Outlook 2016 Security Technical Implementation Guide
22022-03-1128 of 63 findings match
M28
Microsoft Access 2016 Security Technical Implementation Guide
12016-11-0212 of 16 findings match
M12
Microsoft Publisher 2016 Security Technical Implementation Guide
12018-03-1912 of 15 findings match
M12
Show 12 more STIGs in this category →Hide additional STIGs
Microsoft Project 2016 Security Technical Implementation Guide
12016-11-0211 of 14 findings match
M11
Microsoft OneNote 2016 Security Technical Implementation Guide
12017-01-1910 of 10 findings match
M10
Microsoft Visio 2016 Security Technical Implementation Guide
12016-11-0210 of 13 findings match
M10
MS SharePoint Designer 2013 Security Technical Implementation Guide
12018-04-0210 of 10 findings match
M10
Mainframe Product Security Requirements Guide
V3R52026-05-236 of 194 findings match
M6
Microsoft Office System 2016 Security Technical Implementation Guide
22024-12-065 of 20 findings match
M5
Application Layer Gateway Security Requirements Guide
V2R42026-05-233 of 160 findings match
M3
Solaris 11 SPARC Security Technical Implementation Guide
V3R62026-05-133 of 215 findings match
M3
Solaris 11 X86 Security Technical Implementation Guide
V3R62026-05-132 of 214 findings match
M2
Application Server Security Requirements Guide
V4R52026-06-291 of 137 findings match
M1
Microsoft SharePoint 2013 Security Technical Implementation Guide
22024-12-101 of 37 findings match
H1
Web Server Security Requirements Guide
V4R52026-05-231 of 126 findings match
M1