NIST 800-171 · Maintenance
Requirement 3.7.4
- SPRS weight
- SPRS weight: 3
- POA&M eligibility
- Not POA&M-eligible
- Assessment objectives
- 1 assessment objective
Official requirement text
Check media containing diagnostic and test programs for malicious code before the media are used in organizational systems.
Assessment objectives
Assessors don’t evaluate the requirement as one sentence; they walk these objectives one by one. Each must be met for the requirement to score.
- 3.7.4media containing diagnostic and test programs are checked for malicious code before being used in organizational systems that process, store, or transmit CUI.
Inside Valontir, this requirement carries a full plain-English guide: what it asks in normal words, what good looks like in a small shop, the evidence an assessor accepts, the common gaps that cost points, and a plain reading of every assessment objective shown above. See it in a demo.