id: "SI-07(03)" title: "Centrally Managed Integrity Tools" family: "SI" family_name: "System and Information Integrity" sort_id: "si-07.03" priority: "P1" implementation_level: "organization" parent: "SI-07" enhancement: True
Statement
Employ centrally managed integrity verification tools.
Guidance
Centrally managed integrity verification tools provides greater consistency in the application of such tools and can facilitate more comprehensive coverage of integrity verification actions.
Assessment Objective
centrally managed integrity verification tools are employed.
System and information integrity policy
system and information integrity procedures
procedures addressing software, firmware, and information integrity
system design documentation
system configuration settings and associated documentation
integrity verification tools and associated documentation
records of integrity scans
system security plan
other relevant documents or records
Organizational personnel responsible for the central management of integrity verification tools
organizational personnel with information security responsibilities
Mechanisms supporting and/or implementing the central management of integrity verification tools