AU-10 (2) Non-Repudiation | Validate Binding Of Information Producer Identity
The information system:
AU-10 (2)(a): Validates the binding of the information producer identity to the information at [Assignment: organization-defined frequency]; and
AU-10 (2)(b): Performs [Assignment: organization-defined actions] in the event of a validation error.
Applicable CNSSI 1253 Baselines
Confidentiality
- L
- M
- H
Integrity
- L
- M
- H
Availability
- L
- M
- H
Supplemental Guidance
This control enhancement prevents the modification of information between production and review. The validation of bindings can be achieved, for example, by the use of cryptographic checksums. Organizations determine if validations are in response to user requests or generated automatically.