SI-09 Information Input Restrictions
System and Information Integrity
Withdrawn
NIST has withdrawn this control from SP 800-53. Its content moved into AC-02, AC-03, AC-05 and AC-06. The description below is the one it had before.
Description
The organization restricts the capability to input information to the information system to authorized personnel.
Supplemental Guidance
Restrictions on personnel authorized to input information to the information system may extend beyond the typical access controls employed by the system and include limitations based on specific operational/project responsibilities.
Patterns that use this control (2)
Grouped by the emphasis each pattern gives it.
Standard (2)
Compliance Mappings
ISO 42001:2023
A.7.4
ANSSI
Hygiene.14SecNumCloud.10.3
FINMA Circular 2023/1
IV.D(78)IV.D(80)
OSFI B-13
B-13.3.2
EU GDPR
Art.5(1)(f)Art.25(2)
ISO 17799 (legacy)
12.2.112.2.2
COBIT 4.1 (legacy)
AC1AC2