SI-10.1: Manual Override Capability

a manual override capability for the validation of information inputs is provided;

the use of the manual override capability is restricted to only authorized individuals ;

the use of the manual override capability is audited.

System and information integrity policy

system and information integrity procedures

access control policy and procedures

separation of duties policy and procedures

procedures addressing information input validation

system design documentation

system configuration settings and associated documentation

system audit records

system security plan

other relevant documents or records

Organizational personnel responsible for information input validation

organizational personnel with information security responsibilities

system/network administrators

system developer

Organizational processes for the use of a manual override capability

mechanisms supporting and/or implementing a manual override capability for input validation

mechanisms supporting and/or implementing auditing of the use of a manual override capability