BaselineWatch
Desk

SI-15 Information Output Filtering

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged SI

Title

Information Output Filtering

Control

Validate information output from the following software programs and/or applications to ensure that the information is consistent with the expected content: [Assignment: software programs and/or applications].

Discussion

Certain types of attacks, including SQL injections, produce output results that are unexpected or inconsistent with the output results that would be expected from software programs or applications. Information output filtering focuses on detecting extraneous content, preventing such extraneous content from being displayed, and then alerting monitoring tools that anomalous behavior has been discovered.

Parameters

si-15_odp: software programs and/or applications

Related controls

si-11, si-3, si-4

Assessment objective

SI-15 information output from [Assignment: software programs and/or applications] is validated to ensure that the information is consistent with the expected content.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).