NIST 800-53 r5 · Controls catalogue · Family SI
SI-6Security and Privacy Function Verification
Verify the correct operation of {{ insert: param, si-6_prm_1 }}; Perform the verification of the functions specified in SI-6a {{ insert: param, si-06_odp.03 }}; Alert {{ insert: param, si-06_odp.06 }} to failed security and privacy verification tests; and {{ insert: param, si-06_odp.07 }} when anomalies are discovered.
Last updated: 15 October 2026 07:26 UTC
Implementations targeting this control (0)
- No implementations targeting this control yet.
ATT&CK techniques this control mitigates (0)
- No ATT&CK techniques mapped to this control yet.
Weaknesses this control addresses (6)AI-assisted
CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.
| CWE | Name | CVEs | Why this control addresses it |
|---|---|---|---|
CWE-693 | Protection Mechanism Failure | 900+ | Explicit verification and alerting detect when protection mechanisms are not functioning, limiting undetected bypasses. |
CWE-754 | Improper Check for Unusual or Exceptional Conditions | 800+ | Anomaly detection and alerting implement checks for unusual conditions that would otherwise go unnoticed. |
CWE-703 | Improper Check or Handling of Exceptional Conditions | 100+ | The required verification process supplies the missing checks for exceptional conditions affecting security functions. |
CWE-636 | Not Failing Securely ('Failing Open') | 70 | Failed verification tests trigger alerts, reducing the window for exploitation when systems fail open. |
CWE-440 | Expected Behavior Violation | 47 | Verification of security function operation directly detects deviations from expected behavior. |
CWE-684 | Incorrect Provision of Specified Functionality | 31 | Periodic checks confirm that specified security and privacy functions are actually provided and operating. |
Top CVEs where this control is the strongest mitigation
| CVE | Risk | CVSS | EPSS | Match |
|---|---|---|---|---|
CVE-2026-97381 | 6.8 | 9.9 | 0.0021 | partial |
CVE-2025-5987 UPD | 6.5 | 8.1 | 0.0173 | partial |
CVE-2025-8850 UPD | 6.5 | 8.8 | 0.0041 | good |
CVE-2024-32971 UPD | 6.4 | 9.0 | 0.0073 | good |
CVE-2024-49117 UPD | 6.4 | 8.8 | 0.0103 | partial |
CVE-2024-30246 UPD | 5.9 | 7.6 | 0.0062 | good |
CVE-2026-53092 UPD | 5.6 | 7.8 | 0.0013 | partial |
CVE-2023-6129 UPD | 5.5 | 6.5 | 0.0232 | good |
CVE-2026-8806 | 5.5 | 8.7 | 0.0064 | good |
CVE-2026-65934 UPD | 5.5 | 7.1 | 0.0014 | good |
CVE-2026-16769 | 5.5 | 7.1 | 0.0010 | good |
CVE-2024-0148 UPD | 5.3 | 7.6 | 0.0029 | good |
CVE-2026-92821 | 5.2 | 6.8 | 0.0031 | partial |
CVE-2025-6211 UPD | 5.1 | 6.5 | 0.0036 | good |
CVE-2026-42752 | 5.1 | 6.5 | 0.0031 | good |
CVE-2025-52953 UPD | 5.0 | 6.5 | 0.0033 | good |
CVE-2025-24531 UPD | 5.0 | 6.7 | 0.0023 | partial |
CVE-2026-42534 UPD | 4.6 | 5.3 | 0.0072 | good |
CVE-2024-39533 UPD | 4.5 | 5.8 | 0.0030 | good |
CVE-2024-47762 UPD | 4.5 | 5.8 | 0.0037 | good |
CVE-2026-35040 UPD | 4.5 | 5.3 | 0.0063 | good |
CVE-2024-21607 UPD | 4.4 | 5.3 | 0.0031 | good |
CVE-2025-27094 UPD | 4.4 | 5.4 | 0.0037 | good |
CVE-2025-3044 UPD | 4.4 | 5.3 | 0.0032 | good |
CVE-2026-41136 | 4.4 | 5.3 | 0.0033 | good |