SI-10(5)
SI-10(5): Restrict Inputs to Trusted Sources and Approved Formats
The organization restricts the use of information inputs to [organization-defined trusted sources] and/or [organization-defined formats].
Supplemental
This control enhancement applies the concept of whitelisting to information inputs. Specifying known trusted sources for information inputs and acceptable formats for such inputs can reduce the probability of malicious activity.
| CIA Levels | |
|---|---|
| Confidentiality | unknown |
| Integrity | high |
| Availability | unknown |
| Overlays |
|---|
| None |
| CSF Categories |
|---|
| None |