ComplianceNIST 800-53 enhancement
NIST-SI-7(8) Auditing Capability for Significant Events
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- SI System and Information Integrity
- Control
- SI-7(8)
Control statement
Upon detection of a potential integrity violation, provide the capability to audit the event and initiate the following actions: [Selection (one or more of): generate an audit record; alert current user; alert {{ insert: param, si-07.08_odp.02 }} ; {{ insert: param, si-07.08_odp.03 }} ].
Discussion
Organizations select response actions based on types of software, specific software, or information for which there are potential integrity violations.
Related
Enhancement of · Compliance (1)
- NIST-SI-7 Software, Firmware, and Information Integrity NIST 800-53 control
Related control · Compliance (3)
- NIST-AU-12 Audit Record Generation NIST 800-53 control
- NIST-AU-2 Event Logging NIST 800-53 control
- NIST-AU-6 Audit Record Review, Analysis, and Reporting NIST 800-53 control