ComplianceNIST 800-53 enhancement
NIST-SI-10(1) Manual Override Capability
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- SI System and Information Integrity
- Control
- SI-10(1)
Control statement
(a) Provide a manual override capability for input validation of the following information inputs: [Assignment: organization-defined value];
(b) Restrict the use of the manual override capability to only [Assignment: authorized individuals] ; and
(c) Audit the use of the manual override capability.
Discussion
In certain situations, such as during events that are defined in contingency plans, a manual override capability for input validation may be needed. Manual overrides are used only in limited circumstances and with the inputs defined by the organization.
Related
Enhancement of · Compliance (1)
- NIST-SI-10 Information Input Validation NIST 800-53 control
Related control · Compliance (3)
- NIST-AC-3 Access Enforcement NIST 800-53 control
- NIST-AU-12 Audit Record Generation NIST 800-53 control
- NIST-AU-2 Event Logging NIST 800-53 control