+SI-07(02) [H] Automated Notifications of Integrity Violations
|
SI-07(02) [H] Automated Notifications of Integrity Violations
Control
Employ automated tools that provide notification to [Assignement: personnel or roles] upon discovering discrepancies during integrity verification.
Discussion
The employment of automated tools to report system and information integrity violations and to notify organizational personnel in a timely matter is essential to effective risk response. Personnel with an interest in system and information integrity violations include mission and business owners, system owners, senior agency information security official, senior agency official for privacy, system administrators, software developers, systems integrators, information security officers, and privacy officers.
Assessment Objective
automated tools that provide notification to [Assignement: personnel or roles] upon discovering discrepancies during integrity verification are employed.
Assessment Method
Examine
System and information integrity policy
system and information integrity procedures
procedures addressing software, firmware, and information integrity
personally identifiable information processing policy
system design documentation
system configuration settings and associated documentation
integrity verification tools and associated documentation
records of integrity scans
automated tools supporting alerts and notifications for integrity discrepancies
notifications provided upon discovering discrepancies during integrity verifications
system audit records
system security plan
privacy plan
other relevant documents or records
Interview
Organizational personnel responsible for software, firmware, and/or information integrity
organizational personnel with information security and privacy responsibilities
system administrators
software developers
1. Resumen
1.1 Referencias
1.2 Requisitos identificados
1.3 Regulaciones relacionadas
2. Requisitos identificados
Requisitos
| Fuente |
Requisito |
3. Regulaciones relacionadas
Regulaciones
| Fuente |
Regulación |
Incidencias vinculadas
|