Security Controls Evaluation, Testing, and Assessment Handbook

Control number	Control name	Assessment methods	Notes and guidance documents	SP 800-53A guidance
SI-1	System and information integrity policy and procedures	Review the organizational and system documentation to ensure that all system integrity policies and procedures are properly identified and documented. Discuss with System Owner and Security Officer.	SP 800-12, SP 800-100	Examine: System and information integrity policy and procedures; other relevant documents or records. Interview: Organizational personnel with system and information integrity responsibilities; organizational personnel with information security responsibilities.
SI-2	Flaw remediation	Review documentation to determine the flaw remediation actions, activities and ...