+SI-10(05) Restrict Inputs to Trusted Sources and Approved Formats

SI-10(05) Restrict Inputs to Trusted Sources and Approved Formats

Control

Restrict the use of information inputs to [Assignement: trusted sources] and/or [Assignement: formats].

Discussion

Restricting the use of inputs to trusted sources and in trusted formats applies the concept of authorized or permitted software to information inputs. Specifying known trusted sources for information inputs and acceptable formats for such inputs can reduce the probability of malicious activity. The information inputs are those defined by the organization in the base control ( [SI-10](#si-10)).

Assessment Objective

the use of information inputs is restricted to [Assignement: trusted sources] and/or [Assignement: formats].

Assessment Method

Examine

System and information integrity policy system and information integrity procedures procedures addressing information input validation system design documentation system configuration settings and associated documentation list of trusted sources for information inputs list of acceptable formats for input restrictions system audit records system security plan other relevant documents or records

Interview

Organizational personnel responsible for information input validation organizational personnel with information security responsibilities system/network administrators system developer

1. Apžvalga

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

Reikalavimai

3. Susiję teisės aktai

Teisės aktai

Susietos užduotys

Saitai
is blocked by SI-10(05) Restrict Inputs to Trusted Sources and Approved Formats – Assessment Procedure