(a) Provide a manual override capability for input validation of the following information inputs: [Assignment: organization-defined inputs defined in the base control (SI-10)];
(b) Restrict the use of the manual override capability to only [Assignment: organization-defined authorized individuals]; and
(c) Audit the use of the manual override capability.
|
|
| Control Identifier | SI-10(1) |
| Latest Sync Date | 19/12/24 09:18:14 |
| Discussion | In certain situations, such as during events that are defined in contingency plans, a manual override capability for input validation may be needed. Manual overrides are used only in limited circumstances and with the inputs defined by the organization. |
| Related Controls | AC-3, AU-2, AU-12. |