SI-7(12)

Integrity Verification

System and Information Integrity (SI)

Baselines

Low · Not includedModerate · Not includedHigh · Not included

Description

Require that the integrity of the following user-installed software be verified prior to execution: [assignment].

Discussion

Organizations verify the integrity of user-installed software prior to execution to reduce the likelihood of executing malicious code or programs that contains errors from unauthorized modifications. Organizations consider the source of the software, ensuring the software and updates come from authorized sources and/or sites, and the practicality of approaches to verifying software integrity, including the availability of trustworthy checksums from software developers and vendors.

Implementation guidance

No content available.

CSF 2.0 crosswalk

No CSF mappings exist for this control.