---

id: "SI-06" title: "Security and Privacy Function Verification" family: "SI" family_name: "System and Information Integrity" sort_id: "si-06" priority: "P1" implementation_level: "system" enhancements: - si-6.1 - si-6.2 - si-6.3

---

Verify the correct operation of {{ insert: param, si-6_prm_1 }};

Perform the verification of the functions specified in SI-6a {{ insert: param, si-06_odp.03 }};

Alert {{ insert: param, si-06_odp.06 }} to failed security and privacy verification tests; and

{{ insert: param, si-06_odp.07 }} when anomalies are discovered.

Guidance

Transitional states for systems include system startup, restart, shutdown, and abort. System notifications include hardware indicator lights, electronic alerts to system administrators, and messages to local computer consoles. In contrast to security function verification, privacy function verification ensures that privacy functions operate as expected and are approved by the senior agency official for privacy or that privacy attributes are applied or used as expected.

Assessment Objective: {{ insert: param, si-06_odp.01 }} are verified to be operating correctly;

Assessment Objective: {{ insert: param, si-06_odp.02 }} are verified to be operating correctly;

Assessment Objective: {{ insert: param, si-06_odp.01 }} are verified {{ insert: param, si-06_odp.03 }};

Assessment Objective: {{ insert: param, si-06_odp.02 }} are verified {{ insert: param, si-06_odp.03 }};

Assessment Objective: {{ insert: param, si-06_odp.06 }} is/are alerted to failed security verification tests;

Assessment Objective: {{ insert: param, si-06_odp.06 }} is/are alerted to failed privacy verification tests;

Assessment Objective: {{ insert: param, si-06_odp.07 }} is/are initiated when anomalies are discovered.

System and information integrity policy

system and information integrity procedures

procedures addressing security and privacy function verification

system design documentation

system configuration settings and associated documentation

alerts/notifications of failed security verification tests

list of system transition states requiring security functionality verification

system audit records

system security plan

privacy plan

other relevant documents or records

Organizational personnel with security and privacy function verification responsibilities

organizational personnel implementing, operating, and maintaining the system

system/network administrators

organizational personnel with information security and privacy responsibilities

system developer

Organizational processes for security and privacy function verification

mechanisms supporting and/or implementing the security and privacy function verification capability