SCF - END-10 - Mobile Code
Mechanisms exist to address mobile code / operating system-independent applications.
Mapped framework controls
NIST 800-53
Control questions
Does the organization address mobile code / operating system-independent applications?