SI-09 Information Input Restrictions

Control: The organization restricts the capability to input information to the information system to authorized personnel.

Supplemental Guidance: Restrictions on personnel authorized to input information to the information system may extend beyond the typical access controls employed by the system and include limitations based on specific operational/project responsibilities.

Control Enhancements: (0) None.

Baseline: LOW Not Selected MOD SI-9 HIGH SI-9

Family: System And Information Integrity

Class: Operational

ISO 17799 mapping: 12.2.1, 12.2.2

COBIT 4.1 mapping: AC1, AC2

PCI-DSS v2 mapping: None.