SI-10 Information Accuracy, Completeness, Validity, And Authenticity

System and Information Integrity

Low Moderate High

Description

The information system checks information for accuracy, completeness, validity, and authenticity.\n

Supplemental Guidance

Checks for accuracy, completeness, validity, and authenticity of information are accomplished as close to the point of origin as possible. Rules for checking the valid syntax of information system inputs (e.g., character set, length, numerical range, acceptable values) are in place to verify that inputs match specified definitions for format and content. Inputs passed to interpreters are prescreened to prevent the content from being unintentionally interpreted as commands. The extent to which the information system is able to check the accuracy, completeness, validity, and authenticity of information is guided by organizational policy and operational requirements.\n

Enhancements

(0) None.\n

Compliance Mappings

SOC 2 TSC

CC6.6CC6.6-POF2PI1.2-POF1PI1.2-POF2PI1.2-POF3

ISO 17799 (legacy)

10.7.312.2.112.2.2

COBIT 4.1 (legacy)

PO2.4AI2.3AI2.4DS11.1DS11.6AC3AC4AC6