SI-10 Information Input Validation
Last Review: 10/1/22
Statement
The implementation of technologies to prescreen inputs prior to passing to interpreters prevents the content from being unintentionally interpreted as commands. Input validation helps to ensure accurate and correct inputs and prevent attacks such as cross-site scripting and a variety of injection attacks.
Applicability
This Control applies to all West Texas A&M network information resources. The intended audience for this Control includes all information resource owners, custodians, and users of information resources.
Implementation
WTAMU shall implement technological methods to check he validity of information inputs where possible and based on risk decisions.