id: "SI-07(16)" title: "Time Limit on Process Execution Without Supervision" family: "SI" family_name: "System and Information Integrity" sort_id: "si-07.16" priority: "P1" implementation_level: "organization" parent: "SI-07" enhancement: True


Statement

Prohibit processes from executing without supervision for more than {{ insert: param, si-07.16_odp }}.

Guidance

Placing a time limit on process execution without supervision is intended to apply to processes for which typical or normal execution periods can be determined and situations in which organizations exceed such periods. Supervision includes timers on operating systems, automated responses, and manual oversight and response when system process anomalies occur.

Assessment Objective

processes are prohibited from executing without supervision for more than {{ insert: param, si-07.16_odp }}.

System and information integrity policy

system and information integrity procedures

procedures addressing software and information integrity

system design documentation

system configuration settings and associated documentation

system audit records

system security plan

other relevant documents or records

Organizational personnel responsible for software, firmware, and/or information integrity

organizational personnel with information security responsibilities

system/network administrators

system developer

Software, firmware, and information integrity verification tools

mechanisms supporting and/or implementing time limits on process execution without supervision