NIST 800-53 r5 · Controls catalogue · Family SI
SI-22Information Diversity
Identify the following alternative sources of information for {{ insert: param, si-22_odp.02 }}: {{ insert: param, si-22_odp.01 }} ; and Use an alternative information source for the execution of essential functions or services on {{ insert: param, si-22_odp.03 }} when the primary source of information is corrupted or unavailable.
Last updated: 20 August 2026 13:14 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (0)
- No ATT&CK techniques mapped to this control yet.
Weaknesses this control addresses (5)AI-assisted
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-693 | Protection Mechanism Failure | 700+ | Supplies a backup mechanism that continues to function when the primary information protection or integrity control fails. |
CWE-610 | Externally Controlled Reference to a Resource in Another Sphere | 200+ | Limits impact of an externally controlled reference to a primary information resource by switching to an identified alternative. |
CWE-15 | External Control of System or Configuration Setting | 76 | Provides fallback sources for configuration or settings when the primary is externally corrupted or controlled. |
CWE-653 | Improper Isolation or Compartmentalization | 73 | Implements compartmentalization across independent information sources so that compromise of one does not disable essential operations. |
CWE-642 | External Control of Critical State Data | 18 | Directly counters external corruption or unavailability of critical state data by mandating and using alternative sources for essential functions. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
| No CVEs annotated to this control yet — the per-CVE backfill is in progress. | ||||