Sandbox
What is Sandbox?
An isolated testing environment that enables users to run programs or execute code without affecting the rest of the system. In security, sandboxes are used to safely analyse suspicious files and malware.
Terms that appear alongside sandbox
Each of these is named in at least one of the same controls as sandbox. The number is how many controls name both.
- consent 8 shared controls
- compliance 8 shared controls
- regulatory sandbox 7 shared controls
- audit 5 shared controls
- governance 4 shared controls
- cybersecurity 4 shared controls
- breach notification 4 shared controls
- information security 4 shared controls
Frameworks that govern sandbox
What the standards actually require on sandbox
Requirements naming sandbox across 6 standards, quoted from the control text.
Before a subject participates in testing in real world conditions under Art.60, freely given informed consent must be obtained after the subject has been duly informed, in concise, clear, relevant and understandable terms, of the nature and objectives of the t...
EUAI-Art.61 · Informed consent to participate in testing in real world conditions outside AI regulatory sandboxes →Non-persistent virtualised sandboxed environment for risky activities such as processing untrusted documents and web browsing.
ASD37-24 · Non-persistent virtualised sandboxed environment (Very Good) →Executable files imported via gateways or CDSs are automatically executed in a sandbox to detect any suspicious behaviour.
ISM-1389 · Sandboxing imported executable files →Apply D3FEND ISOLATE tactic to create logical or physical barriers in a system to reduce attack opportunities and impact. D3-EI Execution Isolation (D3-HBPI Hardware-based Process Isolation + D3-SCF System Call Filtering + D3-IBCA IO Channel Authentication + D...
MITRE-D3FEND-Isolate-Tactic-Execution-Network-Isolation-Sandboxing-Microsegmentation-DNS-Filtering · MITRE D3FEND Isolate Tactic + Execution + Network Isolation + Sandboxing + Microsegmentation + DNS Filtering →States are invited to adopt AI strategies at national and regional level and to weigh soft governance such as certification of AI systems with mutual recognition, scaled to the sensitivity of the domain, with audit levels, ongoing monitoring and re-certificati...
unesco-recommendation-on-the-ethics-of-ai::PA2b · paras 56, 58, 69 Strategies, certification, AI ethics officers and regulatory sandboxes →Only Microsoft Office macros running from within a sandboxed environment, a Trusted Location or that are digitally signed by a trusted publisher are allowed to execute.
acsc-essential-eight::E8-MACRO-ISM-1674 · Restrict Microsoft Office macros (ISM-1674): Only Microsoft Office macros running from within a sandboxed environment, a Trusted Location or that are digitally signed by a trusted publisher are allowed to execute →Questions people ask about sandbox
What is Sandbox?
Why is Sandbox important for compliance?
Which compliance frameworks address Sandbox?
Where can I learn more about Sandbox?
See how Sandbox applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.