CCI-002752

Implementation Guidance

The organization being inspected/assessed documents and implements a process to review input validation errors within the time period defined in SI-10 (2), CCI 2750. The organization must maintain records of review.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the records of review to ensure the organization being inspected/assessed reviews input validation errors within the time period defined in SI-10 (2), CCI 2750.

Compelling Evidence

1.) Signed and dated System security plan defines a process to review input validation errors within the time period defined in SI-10 (2), CCI 2750. 2.) Records of review.