An error occurred:

© 2024 Xylok, LLC

Version: v2024.12.1-0560-0560

Navigate

SI-10(1)

SI-10(1): Manual Override Capability

The information system:

(a): Provides a manual override capability for input validation of [organization-defined inputs];

(b): Restricts the use of the manual override capability to only [organization-defined authorized individuals]; and

(c): Audits the use of the manual override capability.

Supplemental

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
None

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to SI-10(1).

Control

Description

The organization:

a: Determines the types of changes to the information system that are configuration-controlled;

b: Reviews proposed configuration-controlled changes to the information system and approves or disapproves such changes with explicit consideration for security impact analyses;

c: Documents configuration change decisions associated with the information system;

d: Implements approved configuration-controlled changes to the information system;

e: Retains records of configuration-controlled changes to the information system for [organization-defined time period];

f: Audits and reviews activities associated with configuration-controlled changes to the information system; and

g: Coordinates and provides oversight for configuration change control activities through [organization-defined configuration change control element (e.g., committee, board)] that convenes [one or more of {{ insert: param, cm-3_prm_4 }} / {{ insert: param, cm-3_prm_5 }} ].

The organization defines, documents, approves, and enforces physical and logical access restrictions associated with changes to the information system.

Enhancements

The controls below (if any) add on to the requirements of SI-10(1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SI-10(1).

CCI	Definition
CCI-002745	Defines the inputs defined in base control (SI-10), which provide a manual override capability for input validation.
CCI-002746	Provide a manual override capability for input validation of organization-defined inputs defined in base control (SI-10).
CCI-002747	Defines the individuals who have the authorization to use the manual override capability for input validation.
CCI-002748	Restrict the use of the manual override capability to only organization-defined authorized individuals.
CCI-002749	Audit the use of the manual override capability.