SI-7(8) Auditing Capability for Significant Events
Control enhancement of SI-7 Software, Firmware, and Information Integrity
Control
Upon detection of a potential integrity violation, provide the capability to audit the event and initiate the following actions: [Assignment: Selection (one-or-more): generate an audit record | alert current user | alert [si-07.08_odp.02] | [si-07.08_odp.03] ].
Discussion
Organizations select response actions based on types of software, specific software, or information for which there are potential integrity violations.
Related controls
Need SI-7(8) implemented and evidenced?
We assess where you stand against this control, document the gap, and build the remediation plan your auditor and your board will both accept.
Control catalog and framework text on this page is reproduced from official NIST publications — a public-domain work of the U.S. Government (17 U.S.C. §105). Maverc commentary, groupings, and readiness guidance are our own and are not part of any NIST publication.