System and Information Integrity (SI)

The System and Information Integrity family has 22 active controls in SP 800-53 release 5.2.0. “Yes” marks membership in the SP 800-53B baselines.

Control	Title	Low	Moderate	High	Privacy
SI-1	Policy and Procedures	Yes	Yes	Yes	Yes
SI-2	Flaw Remediation	Yes	Yes	Yes
SI-3	Malicious Code Protection	Yes	Yes	Yes
SI-4	System Monitoring	Yes	Yes	Yes
SI-5	Security Alerts, Advisories, and Directives	Yes	Yes	Yes
SI-6	Security and Privacy Function Verification			Yes
SI-7	Software, Firmware, and Information Integrity		Yes	Yes
SI-8	Spam Protection		Yes	Yes
SI-10	Information Input Validation		Yes	Yes
SI-11	Error Handling		Yes	Yes
SI-12	Information Management and Retention	Yes	Yes	Yes	Yes
SI-13	Predictable Failure Prevention
SI-14	Non-persistence
SI-15	Information Output Filtering
SI-16	Memory Protection		Yes	Yes
SI-17	Fail-safe Procedures
SI-18	Personally Identifiable Information Quality Operations				Yes
SI-19	De-identification				Yes
SI-20	Tainting
SI-21	Information Refresh
SI-22	Information Diversity
SI-23	Information Fragmentation

Withdrawn controls: SI-9.