Skip to content

Mobile Code

What is Mobile Code?

Software transferred across a network and executed on a local system, such as Java applets and scripts, requiring security controls.

Information Security

Frameworks that govern mobile code

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on mobile code

Requirements naming mobile code across 6 standards, quoted from the control text.

CMMC 2.01 control

Define which mobile code technologies are permitted, enforce that decision, and keep mobile code use under observation.

SC.L2-3.13.13 · Mobile Code →
IEC 624431 control

The IACS shall provide the capability to control execution of mobile code (scripts, macros, applets) used within the control system or on engineering workstations.

62443-3-3-FR2-SR-2-4 · Mobile Code Restriction →
NIST SP 800-161 Rev 11 control

Controls mobile code that arrives with delivered components or from supplier-hosted content.

161R1-SC-18 · Mobile Code →
NIST SP 800-171 Rev 31 control

Define acceptable and unacceptable mobile code and mobile code technologies; authorize, monitor, and control use of mobile code.

03.13.13 · Mobile Code →
NIST SP 800-171A - Assessing Security Requirements for Controlled Unclassified Information (CUI)1 control

Determines whether the use of mobile code is controlled, with permitted technologies defined and their use authorized and monitored.

171A-03.13.13 · Mobile Code →
NIST SP 800-53 Rev 51 control

Mobile Code. Define acceptable and unacceptable mobile code and mobile code technologies; and Authorize, monitor, and control the use of mobile code within the system

NIST800-SC-18 · Mobile Code. Define acceptable and unacceptable mobile code and mobile code technologies; and Authorize, monitor, and control the use of mobile code within the system →

Questions people ask about mobile code

What is Mobile Code?
Software transferred across a network and executed on a local system, such as Java applets and scripts, requiring security controls.
Why is Mobile Code important for compliance?
Mobile Code is a key concept in Information Security. Understanding mobile code helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Mobile Code?
Mobile Code appears in the requirement text of CMMC 2.0, IEC 62443, NIST SP 800-161 Rev 1, NIST SP 800-171 Rev 3, NIST SP 800-171A - Assessing Security Requirements for Controlled Unclassified Information (CUI). Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Mobile Code?
Explore our compliance framework pages to see how mobile code applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Mobile Code applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.