SI-10(1) Manual Override Capability
Control enhancement of SI-10 Information Input Validation
Control
Provide a manual override capability for input validation of the following information inputs: [Assignment: organization-defined value];
Restrict the use of the manual override capability to only [Assignment: authorized individuals] ; and
Audit the use of the manual override capability.
Discussion
In certain situations, such as during events that are defined in contingency plans, a manual override capability for input validation may be needed. Manual overrides are used only in limited circumstances and with the inputs defined by the organization.
Related controls
Need SI-10(1) implemented and evidenced?
We assess where you stand against this control, document the gap, and build the remediation plan your auditor and your board will both accept.
Control catalog and framework text on this page is reproduced from official NIST publications — a public-domain work of the U.S. Government (17 U.S.C. §105). Maverc commentary, groupings, and readiness guidance are our own and are not part of any NIST publication.