---

id: "AU-10(02)" title: "Validate Binding of Information Producer Identity" family: "AU" family_name: "Audit and Accountability" sort_id: "au-10.02" priority: "P2" implementation_level: "system" parent: "AU-10" enhancement: True

---

Validate the binding of the information producer identity to the information at {{ insert: param, au-10.02_odp.01 }} ; and

Perform {{ insert: param, au-10.02_odp.02 }} in the event of a validation error.

Guidance

Validating the binding of the information producer identity to the information prevents the modification of information between production and review. The validation of bindings can be achieved by, for example, using cryptographic checksums. Organizations determine if validations are in response to user requests or generated automatically.

Assessment Objective: the binding of the information producer identity to the information is validated at {{ insert: param, au-10.02_odp.01 }};

Assessment Objective: {{ insert: param, au-10.02_odp.02 }} in the event of a validation error are performed.

Audit and accountability policy

system security plan

privacy plan

procedures addressing non-repudiation

system design documentation

system configuration settings and associated documentation

validation records

system audit records

other relevant documents or records

Organizational personnel with information security and privacy responsibilities

system/network administrators

system developers

Mechanisms implementing non-repudiation capability