id: "SI-07(02)" title: "Automated Notifications of Integrity Violations" family: "SI" family_name: "System and Information Integrity" sort_id: "si-07.02" priority: "P1" implementation_level: "system" parent: "SI-07" enhancement: True


Statement

Employ automated tools that provide notification to {{ insert: param, si-07.02_odp }} upon discovering discrepancies during integrity verification.

Guidance

The employment of automated tools to report system and information integrity violations and to notify organizational personnel in a timely matter is essential to effective risk response. Personnel with an interest in system and information integrity violations include mission and business owners, system owners, senior agency information security official, senior agency official for privacy, system administrators, software developers, systems integrators, information security officers, and privacy officers.

Assessment Objective

automated tools that provide notification to {{ insert: param, si-07.02_odp }} upon discovering discrepancies during integrity verification are employed.

System and information integrity policy

system and information integrity procedures

procedures addressing software, firmware, and information integrity

personally identifiable information processing policy

system design documentation

system configuration settings and associated documentation

integrity verification tools and associated documentation

records of integrity scans

automated tools supporting alerts and notifications for integrity discrepancies

notifications provided upon discovering discrepancies during integrity verifications

system audit records

system security plan

privacy plan

other relevant documents or records

Organizational personnel responsible for software, firmware, and/or information integrity

organizational personnel with information security and privacy responsibilities

system administrators

software developers

Software, firmware, and information integrity verification tools

mechanisms providing integrity discrepancy notifications