NIST SP 800-53 Revision 5.1 HIGH SI-11: Error Handling

What else in your programme already covers this

This control maps to 15 controls across 6 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

SOC 2 · 5 controls

SOC2-C1.1 Confidential information is identified and protected during receipt, processing, storage
SOC2-CC6.1 Implements logical access security software, infrastructure and architectures over protected information assets
SOC2-CC7.1 Detection and monitoring procedures for security events are in place
SOC2-CC7.3 Evaluates security events to determine incident status
SOC2-PI1.4 System outputs are complete, valid, accurate, timely, and distributed

ISO 27002:2022 · 4 controls

5.36 Compliance with policies, rules and standards for information security
8.15 Logging
8.25 Secure development life cycle
8.28 Secure coding

ISO 27001:2022 · 3 controls

8.15 Logging
8.28 Secure coding
8.29 Security testing in development and acceptance

C5 (Germany) · 1 control

C5-PSS-04 Error handling and Logging Mechanisms

NIST SP 800-218 · 1 control

SP800-218-PW.5.1 Secure Coding Practices

NIST SP 800-53 Rev 5 · 1 control

NIST800-SI-11 Error Handling. Generate error messages that provide information necessary for corrective actions without revealing information that could be exploited; and Reveal error messages only to [organization-defined]

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.