AU-10(2): Validate Binding of Information Producer Identity
Control Family:
Parent Control:
Threats Addressed:
Baselines:
(Not part of any baseline)
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- AU-10(2): Validate Binding Of Information Producer Identity
Control Statement
- Validate the binding of the information producer identity to the information at [Assignment: organization-defined frequency]; and
- Perform [Assignment: organization-defined actions] in the event of a validation error.
Supplemental Guidance
Validating the binding of the information producer identity to the information prevents the modification of information between production and review. The validation of bindings can be achieved by, for example, using cryptographic checksums. Organizations determine if validations are in response to user requests or generated automatically.