SI-10(03) Predictable Behavior
NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
All changes in this version
Title
Predictable Behavior
Control
Verify that the system behaves in a predictable and documented manner when invalid inputs are received.
Discussion
A common vulnerability in organizational systems is unpredictable behavior when invalid inputs are received. Verification of system predictability helps ensure that the system behaves as expected when invalid inputs are received. This occurs by specifying system responses that allow the system to transition to known states without adverse, unintended side effects. The invalid inputs are those related to the information inputs defined by the organization in the base control ( [SI-10](#si-10)).
STIG rules that implement this control 1
Application Security and Development V6R5
- APSC-DV-002560 CAT I The application must not be subject to input handling vulnerabilities.