FedRAMP High SI-6: Security and Privacy Function Verification. a. Verify the correct operation of [Assignment: organization-defined security and privacy functions]; b. Perform the verification of the functions specified in SI-6a [Selection (one or more): [Assignment: organization-defined system

What else in your programme already covers this

This control maps to 18 controls across 10 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 27001:2022 · 4 controls

5.35 Independent review of information security
5.36 Compliance with policies, rules and standards for information security
8.29 Security testing in development and acceptance
8.32 Change management

ISO 27002:2022 · 4 controls

5.35 Independent review of information security
8.16 Monitoring activities
8.29 Security testing in development and acceptance
8.32 Change management

AWS Well-Architected Security Pillar · 2 controls

SEC01-BP03 Identify and validate control objectives
SEC11-BP07 Regularly assess security properties of the pipelines

PCI DSS 4.0 · 2 controls

10.7.1 Critical security control failure detection (SP)
10.7.2 Critical security control failure detection (all entities)

GDPR · 1 control

GDPR-Art.32 Security of processing

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-PR.DS-10 The confidentiality, integrity, and availability of data-in-use are protected

NIST SP 800-172 · 1 control

3.14.7e Verify Correctness of Security Functions

NIST SP 800-53 Rev 5 · 1 control

NIST800-SI-6 Security and Privacy Function Verification. Verify the correct operation of [organization-defined]; Perform the verification of the functions specified in SI-6a [organization-defined]; Alert [organization-defined] to failed security and privacy verification tests; and [organization-defined] when anomalies

NIST SP 800-53A Rev. 5 · 1 control

53A-C-TEST Assessment Method: Test

SOC 2 · 1 control

SOC2-PI1.3 System processing is complete, valid, accurate, timely, and authorized

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of FedRAMP High have you already done?

FedRAMP High SI-6 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of FedRAMP High your existing evidence covers. Hold C5 (Germany) and 119 of 410 FedRAMP High controls already carry evidence.

If you hold C5 (Germany)29% covered · 291 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 6 were rejected on the C5 (Germany) pair alone.

See the released pairs, $299 each Browse the graph free