SI-10(5)—Information Input Validation
Operational
>Control Description
INFORMATION INPUT VALIDATION | RESTRICT INPUTS TO TRUSTED SOURCES AND APPROVED FORMATS The organization restricts the use of information inputs to ⚙organization-defined trusted sources and/or ⚙organization-defined formats.
>Supplemental Guidance
This control enhancement applies the concept of whitelisting to information inputs. Specifying known trusted sources for information inputs and acceptable formats for such inputs can reduce the probability of malicious activity.
Ask AI
Configure your API key to use AI features.