CyberStrikeus/CyberStrike - Page 141

sc-8-4-conceal-or-randomize-communications

Implement cryptographic mechanisms to conceal or randomize communication patterns unless otherwise protected by [organization-defined].

sc-8-5-protected-distribution-system

Implement [organization-defined] to [organization-defined] during transmission.

sc-8-transmission-confidentiality-and-integrity

Protect the [organization-defined] of transmitted information.

sc-9-transmission-confidentiality

Transmission Confidentiality

si-1-policy-and-procedures

Develop, document, and disseminate to [organization-defined]: [organization-defined] system and information integrity policy that: Procedures to facil

si-10-1-manual-override-capability

Provide a manual override capability for input validation of the following information inputs: [organization-defined];

si-10-2-review-and-resolve-errors

Review and resolve input validation errors within [organization-defined].

si-10-3-predictable-behavior

Verify that the system behaves in a predictable and documented manner when invalid inputs are received.

si-10-4-timing-interactions

Account for timing interactions among system components in determining appropriate responses for invalid inputs.

si-10-5-restrict-inputs-to-trusted-sources-and-approved-formats

Restrict the use of information inputs to [organization-defined] and/or [organization-defined].

si-10-6-injection-prevention

Prevent untrusted data injections.

si-10-information-input-validation

Check the validity of the following information inputs: [organization-defined].

si-11-error-handling

Generate error messages that provide information necessary for corrective actions without revealing information that could be exploited;

si-12-1-limit-personally-identifiable-information-elements

Limit personally identifiable information being processed in the information life cycle to the following elements of personally identifiable informati

si-12-3-information-disposal

Use the following techniques to dispose of, destroy, or erase information following the retention period: [organization-defined].

si-12-information-management-and-retention

Manage and retain information within the system and information output from the system in accordance with applicable laws, executive orders, directive

si-13-1-transferring-component-responsibilities

Take system components out of service by transferring component responsibilities to substitute components no later than [organization-defined] of mean

si-13-2-time-limit-on-process-execution-without-supervision

Time Limit on Process Execution Without Supervision

si-13-3-manual-transfer-between-components

Manually initiate transfers between active and standby system components when the use of the active component reaches [organization-defined] of the me

si-13-4-standby-component-installation-and-notification

If system component failures are detected: Ensure that the standby components are successfully and transparently installed within [organization-define

si-13-5-failover-capability

Provide [organization-defined] [organization-defined] for the system.

si-13-predictable-failure-prevention

Determine mean time to failure (MTTF) for the following system components in specific environments of operation: [organization-defined] ;

si-14-1-refresh-from-trusted-sources

Obtain software and data employed during system component and service refreshes from the following trusted sources: [organization-defined].

si-14-2-non-persistent-information

[organization-defined] ;

si-14-3-non-persistent-connectivity

Establish connections to the system on demand and terminate connections after [organization-defined].

si-14-non-persistence

Implement non-persistent [organization-defined] that are initiated in a known state and terminated [organization-defined].

si-15-information-output-filtering

Validate information output from the following software programs and/or applications to ensure that the information is consistent with the expected co

si-16-memory-protection

Implement the following controls to protect the system memory from unauthorized code execution: [organization-defined].

si-17-fail-safe-procedures

Implement the indicated fail-safe procedures when the indicated failures occur: [organization-defined].

si-18-1-automation-support

Correct or delete personally identifiable information that is inaccurate or outdated, incorrectly determined regarding impact, or incorrectly de-ident

si-18-2-data-tags

Employ data tags to automate the correction or deletion of personally identifiable information across the information life cycle within organizational

si-18-3-collection

Collect personally identifiable information directly from the individual.

si-18-4-individual-requests

Correct or delete personally identifiable information upon request by individuals or their designated representatives.

si-18-5-notice-of-correction-or-deletion

Notify [organization-defined] and individuals that the personally identifiable information has been corrected or deleted.

si-18-personally-identifiable-information-quality-operations

Check the accuracy, relevance, timeliness, and completeness of personally identifiable information across the information life cycle [organization-...

si-19-1-collection

De-identify the dataset upon collection by not collecting personally identifiable information.

si-19-2-archiving

Prohibit archiving of personally identifiable information elements if those elements in a dataset will not be needed after the dataset is archived.

si-19-3-release

Remove personally identifiable information elements from a dataset prior to its release if those elements in the dataset do not need to be part of the

si-19-5-statistical-disclosure-control

Manipulate numerical data, contingency tables, and statistical findings so that no individual or organization is identifiable in the results of the an

si-19-6-differential-privacy

Prevent disclosure of personally identifiable information by adding non-deterministic noise to the results of mathematical operations before the resul