SI-7(5) Automated Response to Integrity Violations
Control enhancement of SI-7 Software, Firmware, and Information Integrity
Control
Automatically [Assignment: Selection (one-or-more): shut down the system | restart the system | implement [si-07.05_odp.02] ] when integrity violations are discovered.
Discussion
Organizations may define different integrity-checking responses by type of information, specific information, or a combination of both. Types of information include firmware, software, and user data. Specific information includes boot firmware for certain types of machines. The automatic implementation of controls within organizational systems includes reversing the changes, halting the system, or triggering audit alerts when unauthorized modifications to critical security files occur.
Need SI-7(5) implemented and evidenced?
We assess where you stand against this control, document the gap, and build the remediation plan your auditor and your board will both accept.
Control catalog and framework text on this page is reproduced from official NIST publications — a public-domain work of the U.S. Government (17 U.S.C. §105). Maverc commentary, groupings, and readiness guidance are our own and are not part of any NIST publication.