CCI-002755

Account for timing interactions among system components in determining appropriate responses for invalid inputs.

Implementation Guidance

Determine if timing interactions among system components are accounted for in determining appropriate responses for invalid inputs.

Validation Procedures

Examine: [SELECT FROM: System and information integrity policy; system and information integrity procedures; procedures addressing information input validation; system design documentation; system configuration settings and associated documentation; system audit records; system security plan; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel responsible for information input validation; organizational personnel with information security responsibilities; system/network administrators; system developer]. Test: [SELECT FROM: Organizational processes for determining appropriate responses to invalid inputs; automated mechanisms supporting and/or implementing responses to invalid inputs].

The controls below (if any) were marked by NIST as being related to CCI-002755.