SI-7(8)

Requirement

Upon detection of a potential integrity violation, provide the capability to audit the event and initiate the following actions: [Selection (one or more): generate an audit record; alert current user; alert [Assignment: organization-defined personnel or roles]; [Assignment: organization-defined other actions]].

Discussion

Organizations select response actions based on types of software, specific software, or information for which there are potential integrity violations.

Title

Software, Firmware, and Information Integrity | Auditing Capability for Significant Events
Family

System and Information Integrity
NIST 800-53B Baseline(s)

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and information integrity policy; system and information integrity procedures; procedures addressing software, firmware, and information integrity; system design documentation; system configuration settings and associated documentation; integrity verification tools and associated documentation; records of integrity scans; incident response records; list of security-relevant changes to the system; automated tools supporting alerts and notifications if unauthorized security changes are detected; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel responsible for software, firmware, and/or information integrity; organizational personnel with information security responsibilities; system/network administrators; system developer].

Test

[SELECT FROM: Software, firmware, and information integrity verification tools; mechanisms supporting and/or implementing the capability to audit potential integrity violations; mechanisms supporting and/or implementing alerts about potential integrity violations].

ID	Assessment Objectives
SI-07(08)[01]	the capability to audit an event upon the detection of a potential integrity violation is provided;
SI-07(08)[02]	<SI-07(08)_ODP[01] SELECTED PARAMETER VALUES> is/are initiated upon the detection of a potential integrity violation.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!