SI-7(3)

Requirement

Employ centrally managed integrity verification tools.

Discussion

Centrally managed integrity verification tools provides greater consistency in the application of such tools and can facilitate more comprehensive coverage of integrity verification actions.

More Info

Title

Software, Firmware, and Information Integrity | Centrally Managed Integrity Tools
Family

System and Information Integrity
NIST 800-53B Baseline(s)

Related NIST 800-53 ID

AU-3;SI-2;SI-8

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and information integrity policy; system and information integrity procedures; procedures addressing software, firmware, and information integrity; system design documentation; system configuration settings and associated documentation; integrity verification tools and associated documentation; records of integrity scans; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel responsible for the central management of integrity verification tools; organizational personnel with information security responsibilities].

Test

[SELECT FROM: Mechanisms supporting and/or implementing the central management of integrity verification tools].

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!