CCI-002758

Restrict the use of information inputs to organization-defined trusted sources and/or organization-defined formats.

Implementation Guidance

The organization being inspected/assessed designs the information system to restrict the use of information inputs to trusted sources defined in SI-10 (5), CCI 2756 and/or formats defined in SI-10 (5), CCI 2757.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines system design artifacts to ensure the organization being inspected/assessed restricts the use of information inputs to trusted sources defined in SI-10 (5), CCI 2756 and/or formats defined in SI-10 (5), CCI 2757.

Compelling Evidence

1.) System design artifacts that restricts the use of information inputs to trusted sources defined in SI-10 (5), CCI 2756 and/or formats defined in SI-10 (5), CCI 2757.

The controls below (if any) were marked by NIST as being related to CCI-002758.