SI-10(1): Manual Override Capability

CSF v1.1 References:

Baselines:

(Not part of any baseline)

Previous Version:

Control Statement

  1. Provide a manual override capability for input validation of the following information inputs: [Assignment: organization-defined inputs defined in the base control (SI-10)];
  2. Restrict the use of the manual override capability to only [Assignment: organization-defined authorized individuals]; and
  3. Audit the use of the manual override capability.

Supplemental Guidance

In certain situations, such as during events that are defined in contingency plans, a manual override capability for input validation may be needed. Manual overrides are used only in limited circumstances and with the inputs defined by the organization.