BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

SI-07(07) Integration of Detection and Response

NIST SP 800-53 (controls) 5.1.1+u4
All changes in this version
first version loaded SI Moderate baselineHigh baseline part of SI-7

Title

Integration of Detection and Response

Control

Incorporate the detection of the following unauthorized changes into the organizational incident response capability: [Assignment: changes].

Discussion

Integrating detection and response helps to ensure that detected events are tracked, monitored, corrected, and available for historical purposes. Maintaining historical records is important for being able to identify and discern adversary actions over an extended time period and for possible legal actions. Security-relevant changes include unauthorized changes to established configuration settings or the unauthorized elevation of system privileges.

Parameters

si-07.07_odp: changes

Related controls

au-2, au-6, ir-4, ir-5, si-4

Assessment objective

SI-07(07) the detection of [Assignment: changes] are incorporated into the organizational incident response capability.

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).