SI-10(1)
-
Requirement
(a) Provide a manual override capability for input validation of the following information inputs: [Assignment: organization-defined inputs defined in the base control (SI-10)];
(b) Restrict the use of the manual override capability to only [Assignment: organization-defined authorized individuals]; and
(c) Audit the use of the manual override capability.
-
Discussion
In certain situations, such as during events that are defined in contingency plans, a manual override capability for input validation may be needed. Manual overrides are used only in limited circumstances and with the inputs defined by the organization.
CMMC Training
Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!