+SI-10(01) Manual Override Capability

SI-10(01) Manual Override Capability

Control

  1. Provide a manual override capability for input validation of the following information inputs: [Assignement: information inputs];
  2. Restrict the use of the manual override capability to only [Assignement: authorized individuals] ; and
  3. Audit the use of the manual override capability.

Discussion

In certain situations, such as during events that are defined in contingency plans, a manual override capability for input validation may be needed. Manual overrides are used only in limited circumstances and with the inputs defined by the organization.

Assessment Objective

  1. a manual override capability for the validation of [Assignement: information inputs] is provided;
  2. the use of the manual override capability is restricted to only [Assignement: authorized individuals];
  3. the use of the manual override capability is audited.

Assessment Method

Examine

System and information integrity policy system and information integrity procedures access control policy and procedures separation of duties policy and procedures procedures addressing information input validation system design documentation system configuration settings and associated documentation system audit records system security plan other relevant documents or records

Interview

Organizational personnel responsible for information input validation organizational personnel with information security responsibilities system/network administrators system developer

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
is blocked by SI-10(01) Manual Override Capability – Assessment Procedure