Skip to main content

Solution design and technology roadmapping

Solution Assessment Technology Roadmaps Integration Design Solution Architecture Technical Design

Security assessments, IAM, and compliance

Assessments IAM Compliance Security Baseline Cyber Innovation

Network and Platform

Network architecture and cloud platforms

Network Design Cloud Strategy Modernisation

Enterprise Architecture

Business-technology alignment

Business Alignment Portfolio Analysis Governance

View all services

Projects Case Studies Insights Tools About

Services

Solution Assessment Technology Roadmaps Integration Design Solution Architecture Technical Design

Assessments IAM Compliance Security Baseline Cyber Innovation

Network and Platform

Network Design Cloud Strategy Modernisation

Enterprise Architecture

Business Alignment Portfolio Analysis Governance

Projects Case Studies Insights Tools About Contact

Strategic technology consulting for Australian organisations navigating complexity.

Services

Architecture
Cyber Security
Network and Platform
Enterprise Architecture

Company

About
Products
Frameworks
Cross-Framework Mapping
Projects
Case Studies
Insights
Contact

Contact

[email protected]
Australia
LinkedIn

© 2026 Muon Partners. All rights reserved.

ABN 50 669 022 315 · A Muon Group company.

Privacy Policy Terms of Service

Frameworks
SP 800-53
System And Information Integrity
SP800-53-SI-14(1)

SP800-53-SI-14(1)Active

Refresh from Trusted Sources

Statement

Obtain software and data employed during system component and service refreshes from the following trusted sources: trusted sources.

Location

Control Family: System and Information Integrity

Control Details

Identifier: SP800-53-SI-14(1)
Family: SI
Parent Control: SP800-53-SI-14

Organisation-Defined Parameters

si-14.01_odp: trusted sources

Supplemental Guidance

Trusted sources include software and data from write-once, read-only media or from selected offline secure storage facilities.

Assessment Objective

the software and data employed during system component and service refreshes are obtained from trusted sources.

No cross-framework mappings available

← Back to System and Information Integrity

System and Information Integrity119 controls

SP800-53-SI-1Policy and Procedures SP800-53-SI-2Flaw Remediation SP800-53-SI-2(1)Central Management SP800-53-SI-2(2)Automated Flaw Remediation Status SP800-53-SI-2(3)Time to Remediate Flaws and Benchmarks for Corrective Actions SP800-53-SI-2(4)Automated Patch Management Tools SP800-53-SI-2(5)Automatic Software and Firmware Updates SP800-53-SI-2(6)Removal of Previous Versions of Software and Firmware SP800-53-SI-2(7)Root Cause Analysis SP800-53-SI-3Malicious Code Protection SP800-53-SI-3(1)Central Management SP800-53-SI-3(2)Automatic Updates SP800-53-SI-3(3)Non-privileged Users SP800-53-SI-3(4)Updates Only by Privileged Users SP800-53-SI-3(5)Portable Storage Devices SP800-53-SI-3(6)Testing and Verification SP800-53-SI-3(7)Nonsignature-based Detection SP800-53-SI-3(8)Detect Unauthorized Commands SP800-53-SI-3(9)Authenticate Remote Commands SP800-53-SI-3(10)Malicious Code Analysis SP800-53-SI-4System Monitoring SP800-53-SI-4(1)System-wide Intrusion Detection System SP800-53-SI-4(2)Automated Tools and Mechanisms for Real-time Analysis SP800-53-SI-4(3)Automated Tool and Mechanism Integration SP800-53-SI-4(4)Inbound and Outbound Communications Traffic SP800-53-SI-4(5)System-generated Alerts SP800-53-SI-4(6)Restrict Non-privileged Users SP800-53-SI-4(7)Automated Response to Suspicious Events SP800-53-SI-4(8)Protection of Monitoring Information SP800-53-SI-4(9)Testing of Monitoring Tools and Mechanisms SP800-53-SI-4(10)Visibility of Encrypted Communications SP800-53-SI-4(11)Analyze Communications Traffic Anomalies SP800-53-SI-4(12)Automated Organization-generated Alerts SP800-53-SI-4(13)Analyze Traffic and Event Patterns SP800-53-SI-4(14)Wireless Intrusion Detection SP800-53-SI-4(15)Wireless to Wireline Communications SP800-53-SI-4(16)Correlate Monitoring Information SP800-53-SI-4(17)Integrated Situational Awareness SP800-53-SI-4(18)Analyze Traffic and Covert Exfiltration SP800-53-SI-4(19)Risk for Individuals SP800-53-SI-4(20)Privileged Users SP800-53-SI-4(21)Probationary Periods SP800-53-SI-4(22)Unauthorized Network Services SP800-53-SI-4(23)Host-based Devices SP800-53-SI-4(24)Indicators of Compromise SP800-53-SI-4(25)Optimize Network Traffic Analysis SP800-53-SI-5Security Alerts, Advisories, and Directives SP800-53-SI-5(1)Automated Alerts and Advisories SP800-53-SI-6Security and Privacy Function Verification SP800-53-SI-6(1)Notification of Failed Security Tests SP800-53-SI-6(2)Automation Support for Distributed Testing SP800-53-SI-6(3)Report Verification Results SP800-53-SI-7Software, Firmware, and Information Integrity SP800-53-SI-7(1)Integrity Checks SP800-53-SI-7(2)Automated Notifications of Integrity Violations SP800-53-SI-7(3)Centrally Managed Integrity Tools SP800-53-SI-7(4)Tamper-evident Packaging SP800-53-SI-7(5)Automated Response to Integrity Violations SP800-53-SI-7(6)Cryptographic Protection SP800-53-SI-7(7)Integration of Detection and Response SP800-53-SI-7(8)Auditing Capability for Significant Events SP800-53-SI-7(9)Verify Boot Process SP800-53-SI-7(10)Protection of Boot Firmware SP800-53-SI-7(11)Confined Environments with Limited Privileges SP800-53-SI-7(12)Integrity Verification SP800-53-SI-7(13)Code Execution in Protected Environments SP800-53-SI-7(14)Binary or Machine Executable Code SP800-53-SI-7(15)Code Authentication SP800-53-SI-7(16)Time Limit on Process Execution Without Supervision SP800-53-SI-7(17)Runtime Application Self-protection SP800-53-SI-8Spam Protection SP800-53-SI-8(1)Central Management SP800-53-SI-8(2)Automatic Updates SP800-53-SI-8(3)Continuous Learning Capability SP800-53-SI-9Information Input Restrictions SP800-53-SI-10Information Input Validation SP800-53-SI-10(1)Manual Override Capability SP800-53-SI-10(2)Review and Resolve Errors SP800-53-SI-10(3)Predictable Behavior SP800-53-SI-10(4)Timing Interactions SP800-53-SI-10(5)Restrict Inputs to Trusted Sources and Approved Formats SP800-53-SI-10(6)Injection Prevention SP800-53-SI-11Error Handling SP800-53-SI-12Information Management and Retention SP800-53-SI-12(1)Limit Personally Identifiable Information Elements SP800-53-SI-12(2)Minimize Personally Identifiable Information in Testing, Training, and Research SP800-53-SI-12(3)Information Disposal SP800-53-SI-13Predictable Failure Prevention SP800-53-SI-13(1)Transferring Component Responsibilities SP800-53-SI-13(2)Time Limit on Process Execution Without Supervision SP800-53-SI-13(3)Manual Transfer Between Components SP800-53-SI-13(4)Standby Component Installation and Notification SP800-53-SI-13(5)Failover Capability SP800-53-SI-14Non-persistence SP800-53-SI-14(1)Refresh from Trusted Sources SP800-53-SI-14(2)Non-persistent Information SP800-53-SI-14(3)Non-persistent Connectivity SP800-53-SI-15Information Output Filtering SP800-53-SI-16Memory Protection SP800-53-SI-17Fail-safe Procedures SP800-53-SI-18Personally Identifiable Information Quality Operations SP800-53-SI-18(1)Automation Support SP800-53-SI-18(2)Data Tags SP800-53-SI-18(3)Collection SP800-53-SI-18(4)Individual Requests SP800-53-SI-18(5)Notice of Correction or Deletion SP800-53-SI-19De-identification SP800-53-SI-19(1)Collection SP800-53-SI-19(2)Archiving SP800-53-SI-19(3)Release SP800-53-SI-19(4)Removal, Masking, Encryption, Hashing, or Replacement of Direct Identifiers SP800-53-SI-19(5)Statistical Disclosure Control SP800-53-SI-19(6)Differential Privacy SP800-53-SI-19(7)Validated Algorithms and Software SP800-53-SI-19(8)Motivated Intruder SP800-53-SI-20Tainting SP800-53-SI-21Information Refresh SP800-53-SI-22Information Diversity SP800-53-SI-23Information Fragmentation