ComplianceNIST 800-53 enhancement
NIST-AU-10(2) Validate Binding of Information Producer Identity
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- AU Audit and Accountability
- Control
- AU-10(2)
Control statement
(a) Validate the binding of the information producer identity to the information at [Assignment: frequency] ; and
(b) Perform [Assignment: actions] in the event of a validation error.
Discussion
Validating the binding of the information producer identity to the information prevents the modification of information between production and review. The validation of bindings can be achieved by, for example, using cryptographic checksums. Organizations determine if validations are in response to user requests or generated automatically.
Related
Enhancement of · Compliance (1)
- NIST-AU-10 Non-repudiation NIST 800-53 control
Related control · Compliance (3)
- NIST-AC-16 Security and Privacy Attributes NIST 800-53 control
- NIST-AC-3 Access Enforcement NIST 800-53 control
- NIST-AC-4 Information Flow Enforcement NIST 800-53 control