Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If Applicable,” provide “Not rationale. Apply deny-by-exception (blacklisting) policy to prevent the use of unauthorized software or deny-all, permit-by-exception (whitelisting) policy to allow the execution of authorized software. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If Applicable,” provide “Not rationale. Control and monitor user-installed software. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If Applicable,” provide “Not rationale. Identification and Authentication Identify system users, processes acting on behalf of users, and devices. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If Applicable,” provide “Not rationale. Authenticate (or verify) the identities of users, processes, or devices, as a prerequisite to allowing access to organizational systems. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If Applicable,” provide “Not rationale. Use multifactor authentication19F for local and network access20Fto privileged accounts and for network access to non-privileged accounts. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If Applicable,” provide “Not rationale. Employ replay-resistant authentication mechanisms for network access to privileged and accounts. Implemented Planned to be Implemented Not Applicable
Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If “Not Applicable,” provide rationale. Apply deny-by-exception (blacklisting) policy to prevent the use of unauthorized software or deny-all, permit-by-exception (whitelisting) policy to allow the execution of authorized software. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If “Not Applicable,” provide rationale. Control and monitor user-installed software. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If “Not Applicable,” provide rationale. Identification and Authentication Identify system users, processes acting on behalf of users, and devices. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If “Not Applicable,” provide rationale. Authenticate (or verify) the identities of users, processes, or devices, as a prerequisite to allowing access to organizational systems. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If “Not Applicable,” provide rationale. Use multifactor authentication19F for local and network access20Fto privileged accounts and for network access to non-privileged accounts. Implemented Planned to be Implemented Not Applicable Current implementation or planned implementation details. If “Not Applicable,” provide rationale. Employ replay-resistant authentication mechanisms for network access to privileged and accounts. Implemented Planned to be Implemented Not Applicable
CUI-SSP-Template-final.docx