---

id: "SI-10(01)" title: "Manual Override Capability" family: "SI" family_name: "System and Information Integrity" sort_id: "si-10.01" priority: "P1" implementation_level: "system" parent: "SI-10" enhancement: True

---

Provide a manual override capability for input validation of the following information inputs: {{ insert: param, si-10_odp }};

Restrict the use of the manual override capability to only {{ insert: param, si-10.01_odp }} ; and

Audit the use of the manual override capability.

Guidance

In certain situations, such as during events that are defined in contingency plans, a manual override capability for input validation may be needed. Manual overrides are used only in limited circumstances and with the inputs defined by the organization.

Assessment Objective: a manual override capability for the validation of {{ insert: param, si-10_odp }} is provided;

Assessment Objective: the use of the manual override capability is restricted to only {{ insert: param, si-10.01_odp }};

Assessment Objective: the use of the manual override capability is audited.

System and information integrity policy

system and information integrity procedures

access control policy and procedures

separation of duties policy and procedures

procedures addressing information input validation

system design documentation

system configuration settings and associated documentation

system audit records

system security plan

other relevant documents or records

Organizational personnel responsible for information input validation

organizational personnel with information security responsibilities

system/network administrators

system developer

Organizational processes for the use of a manual override capability

mechanisms supporting and/or implementing a manual override capability for input validation

mechanisms supporting and/or implementing auditing of the use of a manual override capability