SI-10(1) Information Input Validation | Manual Override Capability
Control
(a) Provide a manual override capability for input validation of the following information inputs: [Assignment: organization-defined inputs defined in the base control (SI-10)];
(b) Restrict the use of the manual override capability to only [Assignment: organization-defined authorized individuals]; and
(c) Audit the use of the manual override capability.
Discussion
In certain situations, such as during events that are defined in contingency plans, a manual override capability for input validation may be needed. Manual overrides are used only in limited circumstances and with the inputs defined by the organization.
Related Controls
Edited by Kamlesh