Navigate

SI-7 (5)

SI-7 (5): Automated Response To Integrity Violations

The information system automatically [Selection (one or more): shuts the information system down; restarts the information system; implements [Assignment: organization-defined security safeguards]] when integrity violations are discovered.

Supplemental

Organizations may define different integrity checking and anomaly responses: (i) by type of information (e.g., firmware, software, user data); (ii) by specific information (e.g., boot firmware, boot firmware for a specific types of machines); or (iii) a combination of both. Automatic implementation of specific safeguards within organizational information systems includes, for example, reversing the changes, halting the information system, or triggering audit alerts when unauthorized modifications to critical security files occur.

CIA Levels
Confidentiality	unknown
Integrity	high
Availability	unknown

Overlays
None

Related Controls

The controls below (if any) were marked by NIST as being related to SI-7 (5).

Control	Description
No controls

Enhancements

The controls below (if any) add on to the requirements of SI-7 (5).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SI-7 (5).

CCI	Definition
CCI-002714	The organization defines the security safeguards that are to be employed when integrity violations are discovered.
CCI-002715	The information system automatically shuts the information system down, restarts the information system, and/or implements organization-defined security safeguards when integrity violations are discovered.