NIST-SA-9(7) Organization-controlled Integrity Checking

Provide the capability to check the integrity of information while it resides in the external system.

Storage of organizational information in an external system could limit visibility into the security status of its data. The ability of the organization to verify and validate the integrity of its stored data without transferring it out of the external system provides such visibility.