Detections
Analytics
800-53|SA-10(1)
Title
SOFTWARE / FIRMWARE INTEGRITY VERIFICATIONDescription
The organization requires the developer of the information system, system component, or information system service to enable integrity verification of software and firmware components.Supplemental
This control enhancement allows organizations to detect unauthorized changes to software and firmware components through the use of tools, techniques, and/or mechanisms provided by developers. Integrity checking mechanisms can also address counterfeiting of software and firmware components. Organizations verify the integrity of software and firmware components, for example, through secure one-way hashes provided by developers. Delivered software and firmware components also include any updates to such components.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: SI-7
Category: SYSTEM AND SERVICES ACQUISITION
Parent Title: DEVELOPER CONFIGURATION MANAGEMENT
Family: SYSTEM AND SERVICES ACQUISITION
Audit Items
View all Reference Audit Items