SI-07(05) Automated Response to Integrity Violations

Automatically si-07.05_odp.01 when integrity violations are discovered.

Parameter ID Definition
si-07.05_odp.01

Selection (one-or-more):

  • shut down the system
  • restart the system
  • implement {{ insert: param
  • si-07.05_odp.02 }}
si-07.05_odp.02 controls

Baselines

Guidance

Organizations may define different integrity-checking responses by type of information, specific information, or a combination of both. Types of information include firmware, software, and user data. Specific information includes boot firmware for certain types of machines. The automatic implementation of controls within organizational systems includes reversing the changes, halting the system, or triggering audit alerts when unauthorized modifications to critical security files occur.