SI-7(9)

Requirement

Verify the integrity of the boot process of the following system components: [Assignment: organization-defined system components].

Discussion

Ensuring the integrity of boot processes is critical to starting system components in known, trustworthy states. Integrity verification mechanisms provide a level of assurance that only trusted code is executed during boot processes.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and information integrity policy; system and information integrity procedures; procedures addressing software, firmware, and information integrity; system design documentation; system configuration settings and associated documentation; integrity verification tools and associated documentation; documentation; records of integrity verification scans; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel responsible for software, firmware, and/or information integrity; organizational personnel with information security responsibilities; system developer].

Test

[SELECT FROM: Software, firmware, and information integrity verification tools; mechanisms supporting and/or implementing integrity verification of the boot process].

ID	Assessment Objectives
SI-07(09)	the integrity of the boot process of <SI-07(09)_ODP system components> is verified.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!