AU-10.2 ยท Validate Binding of Information Producer Identity

Control Description

Validate the binding of the information producer identity to the information at {{ insert: param, au-10.02_odp.01 }} ; and Perform {{ insert: param, au-10.02_odp.02 }} in the event of a validation error.

Impact Baselines
Security baselines where this control applies
Not in any baseline
Control Properties
SP800-53-enhancement
system
Assurance
Enhancement
Control Statement
The control requirements

(a) Validate the binding of the information producer identity to the information at {{ insert: param, au-10.02_odp.01 }} ; and

(b) Perform {{ insert: param, au-10.02_odp.02 }} in the event of a validation error.

Supplemental Guidance

Validating the binding of the information producer identity to the information prevents the modification of information between production and review. The validation of bindings can be achieved by, for example, using cryptographic checksums. Organizations determine if validations are in response to user requests or generated automatically.

Related NIST Controls
Other NIST 800-53 controls related to this one
AC-03
AC-04
AC-16