Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> SI-2(2) What is the solution and how is it implemented? SI-3c Malicious Code Protection – The organization: … c. Configures malicious code protection mechanisms to: - perform periodic scans of the information system [Assignment: and real-time scans of files from external sources organization-defined frequency] as the files are downloaded, opened, or executed in accordance with organizational security policy; and - [Selection (one or more): block malicious code; quarantine malicious code; send alert to [Assignment: in response to malicious code administrator; organization-defined action] detection; DoD parameter 1: [at least weekly] DoD parameter 2: [block malicious code; quarantine malicious code; send alert to administrator] DoD parameter 3: [send alert to USCYBERCOM via DoD customer's CNDSP, and send alert to ECSB] FedRAMP baseline parameter: Parameter 1: [at least weekly] Parameter 2: [block malicious code; quarantine malicious code; send alert to administrator] Parameter 3: [block or quarantine malicious code, send alert to administrator, send alert to FedRAMP] SI-3c Control Summary Information Responsible Role: Parameter 3:
Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> SI-2(2) What is the solution and how is it implemented? SI-3c – Malicious Code Protection The organization: … c. Configures malicious code protection mechanisms to: - perform periodic scans of the information system [Assignment: organization-defined frequency] and real-time scans of files from external sources as the files are downloaded, opened, or executed in accordance with organizational security policy; and - [Selection (one or more): block malicious code; quarantine malicious code; send alert to administrator; [Assignment: organization-defined action] in response to malicious code detection; DoD parameter 1: [at least weekly] DoD parameter 2: [block malicious code; quarantine malicious code; send alert to administrator] DoD parameter 3: [send alert to USCYBERCOM via DoD customer's CNDSP, and send alert to ECSB] FedRAMP baseline parameter: Parameter 1: [at least weekly] Parameter 2: [block malicious code; quarantine malicious code; send alert to administrator] Parameter 3: [block or quarantine malicious code, send alert to administrator, send alert to FedRAMP] SI-3c Control Summary Information Responsible Role: Parameter 3:
U_CSM_level_4_saas_template.docx