CCI-002753

Implementation Guidance

The organization being inspected/assessed documents and implements a process to resolve input validation errors within the time period defined in SI-10 (2), CCI 2751. The organization must maintain records of resolution.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the records of resolution to ensure the organization being inspected/assessed resolves input validation errors within the time period defined in SI-10 (2), CCI 2751.

Compelling Evidence

1.) Signed and dated System security plan defines a process to resolve input validation errors within the time period defined in SI-10 (2), CCI 2750. 2.) Records of resolution.