SI-10(1): Manual Override Capability

CSF v1.1 References:

CSF v2.0 References:

PF v1.0 References:

Baselines:

(Not part of any baseline)

Previous Version:

Control Statement

  1. Provide a manual override capability for input validation of the following information inputs: [Assignment: organization-defined information inputs];
  2. Restrict the use of the manual override capability to only [Assignment: organization-defined authorized individuals] ; and
  3. Audit the use of the manual override capability.

Supplemental Guidance

In certain situations, such as during events that are defined in contingency plans, a manual override capability for input validation may be needed. Manual overrides are used only in limited circumstances and with the inputs defined by the organization.