{"catalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","kind":"record","record":{"attributes":{"category":"technical","domain":"Network & Communications Security","type":"preventive"},"canonicalUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-NET-13","description":"Define acceptable and unacceptable mobile-code technologies, and authorize, monitor, and control mobile code so unauthorized active content cannot execute in browsers, documents, or email. Filter access to external websites by category and reputation to reduce exposure to malicious content, and log enforcement actions.","details":{"control_category":"technical","control_type":"preventive","domain":"Network & Communications Security","guidance":[],"members":[{"control_id":"SC-18","coverage":"full","framework":"nist-800-53","relationship":"superset_of"},{"control_id":"A.8.23","coverage":"full","framework":"iso-27001","relationship":"superset_of"}],"statement":"Define acceptable and unacceptable mobile-code technologies, and authorize, monitor, and control mobile code so unauthorized active content cannot execute in browsers, documents, or email. Filter access to external websites by category and reputation to reduce exposure to malicious content, and log enforcement actions.","title":"Control mobile code and web content","unified_id":"UC-NET-13"},"id":"uc:UC-NET-13","mapUrl":"https://controlsmap.com/?v=1&node=uc%3AUC-NET-13","sourceIds":["iso-27001","nist-800-53"],"sourceUrl":null,"title":"UC-NET-13 — Control mobile code and web content","type":"unified"},"relationships":[{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:0f481b1b32b406c2c265d68e136f466376a311d135f4e13c39acc13c7f02cdf7","properties":{},"sourceDetailPath":"/data/v1/records/wf-c9-75fb1752.json","sourceId":"wf:C9","targetDetailPath":"/data/v1/records/uc-uc-net-13-df790edf.json","targetId":"uc:UC-NET-13","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:23cd16ef46145483264f61a0ea48082f172f55a13ee195e17c714293f6729bed","properties":{"rationale":"Category/reputation web filtering and mobile-code control reduce acceptance and execution of content from untrustworthy sources.","strength":"related"},"sourceDetailPath":"/data/v1/records/uc-uc-net-13-df790edf.json","sourceId":"uc:UC-NET-13","targetDetailPath":"/data/v1/records/risk-net-untrustworthy-input-data-6465a381.json","targetId":"risk:net-untrustworthy-input-data","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:3b0735e06bda2cdf8f253bab2b98321721c9a24f3b29655111fc0f0b7aad72df","properties":{"control_id":"SC-18","coverage":"full","delta":null,"framework":"nist-800-53","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"Rev. 5"},"sourceDetailPath":"/data/v1/records/uc-uc-net-13-df790edf.json","sourceId":"uc:UC-NET-13","targetDetailPath":"/data/v1/records/ctrl-nist-800-53-sc-18-d3d28359.json","targetId":"ctrl:nist-800-53:SC-18","type":"maps_to"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:62960c422c198d7937854108f2f52e093a484fc2e3a071629cdc824fd3e6449f","properties":{"rationale":"Blocking unauthorized active/mobile code in browsers, documents, and email and filtering malicious websites prevents web/email malware delivery.","strength":"primary"},"sourceDetailPath":"/data/v1/records/uc-uc-net-13-df790edf.json","sourceId":"uc:UC-NET-13","targetDetailPath":"/data/v1/records/risk-sdlc-malware-injection-compromise-ec5a8dc4.json","targetId":"risk:sdlc-malware-injection-compromise","type":"mitigates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:710bbd83435a57236bd440e6afbac1a447e3fa6ea71edf1ed5cd9a29ec367dfd","properties":{},"sourceDetailPath":"/data/v1/records/wf-d06-c9616fb8.json","sourceId":"wf:D06","targetDetailPath":"/data/v1/records/uc-uc-net-13-df790edf.json","targetId":"uc:UC-NET-13","type":"tests"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:92574c9f6490a9c26946ae9223b5e2a3b0596de54a898d472215cff4ccc42699","properties":{},"sourceDetailPath":"/data/v1/records/wf-c44-c8ff29dd.json","sourceId":"wf:C44","targetDetailPath":"/data/v1/records/uc-uc-net-13-df790edf.json","targetId":"uc:UC-NET-13","type":"operates"},{"expectedCatalogRevision":"24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028","id":"rel:ee557c335938bdb4b1cc2ac82b518c84c9545e30e6d4dc4096e6679d034009fb","properties":{"control_id":"A.8.23","coverage":"full","delta":null,"framework":"iso-27001","provenance":{"defaultConfidence":"medium","defaultStatus":"active","direction":"canonical_to_source","mapper":"coworkcanvas-compliance-graph","note":"Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.","reviewDate":"2026-09-07"},"relationship":"superset_of","source_version":"2022"},"sourceDetailPath":"/data/v1/records/uc-uc-net-13-df790edf.json","sourceId":"uc:UC-NET-13","targetDetailPath":"/data/v1/records/ctrl-iso-27001-a-8-23-91f17a7e.json","targetId":"ctrl:iso-27001:A.8.23","type":"maps_to"}],"schemaVersion":1}