SI-14(1) Refresh from Trusted Sources
Control enhancement of SI-14 Non-persistence
Control
Obtain software and data employed during system component and service refreshes from the following trusted sources: [Assignment: trusted sources].
Discussion
Trusted sources include software and data from write-once, read-only media or from selected offline secure storage facilities.
Need SI-14(1) implemented and evidenced?
We assess where you stand against this control, document the gap, and build the remediation plan your auditor and your board will both accept.
Control catalog and framework text on this page is reproduced from official NIST publications — a public-domain work of the U.S. Government (17 U.S.C. §105). Maverc commentary, groupings, and readiness guidance are our own and are not part of any NIST publication.