id: "SC-16(01)" title: "Integrity Verification" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-16.01" priority: "P1" implementation_level: "system" parent: "SC-16" enhancement: True
Statement
Verify the integrity of transmitted security and privacy attributes.
Guidance
Part of verifying the integrity of transmitted information is ensuring that security and privacy attributes that are associated with such information have not been modified in an unauthorized manner. Unauthorized modification of security or privacy attributes can result in a loss of integrity for transmitted information.
Assessment Objective: the integrity of transmitted security attributes is verified;
Assessment Objective: the integrity of transmitted privacy attributes is verified.
System and communications protection policy
procedures addressing the transmission of security and privacy attributes
access control policy and procedures
system design documentation
system configuration settings and associated documentation
system audit records
system security plan
privacy plan
other relevant documents or records
System/network administrators
organizational personnel with information security and privacy responsibilities
Mechanisms supporting and/or implementing verification of the integrity of transmitted security and privacy attributes