Detections
Analytics
800-53|SI-7(5)
Title
AUTOMATED RESPONSE TO INTEGRITY VIOLATIONSDescription
The information system automatically [Selection (one or more): shuts the information system down; restarts the information system; implements [Assignment: organization-defined security safeguards]] when integrity violations are discovered.Supplemental
Organizations may define different integrity checking and anomaly responses: (i) by type of information (e.g., firmware, software, user data); (ii) by specific information (e.g., boot firmware, boot firmware for a specific types of machines); or (iii) a combination of both. Automatic implementation of specific safeguards within organizational information systems includes, for example, reversing the changes, halting the information system, or triggering audit alerts when unauthorized modifications to critical security files occur.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Category: SYSTEM AND INFORMATION INTEGRITY
Parent Title: SOFTWARE, FIRMWARE, AND INFORMATION INTEGRITY
Family: SYSTEM AND INFORMATION INTEGRITY
Baseline Impact: HIGH
Audit Items
View all Reference Audit Items