SI-6 : SECURITY FUNCTIONALITY VERIFICATION

FAMILY: System and Information Integrity

CLASS: Operational

SI-6 : SECURITY FUNCTIONALITY VERIFICATION

The information system verifies the correct operation of security functions [Selection (one or more): [Assignment: organization-defined system transitional states]; upon command by user with appropriate privilege; periodically every [Assignment: organization-defined time-period]] and [Selection (one or more): notifies system administrator; shuts the system down; restarts the system; [Assignment: organization-defined alternative action(s)]] when anomalies are discovered. The need to verify security functionality applies to all security functions. For those security functions that are not able to execute automated self-tests, the organization either implements compensating security controls or explicitly accepts the risk of not performing the verification as required. Information system transitional states include, for example, startup, restart, shutdown, and abort.

Control Enhancements:

References: None.

Priority and Baseline Allocation:

P1

LOW SI-6 Not Selected

MOD SI-6 Not Selected

HIGH SI-6