# SI-15 — Information Output Filtering

- **Control ID:** SI-15
- **Family:** [SI](/md/families/SI.md)
- **Baselines:** No content available.
- **Enhancement of:** No content available.

## Description

Validate information output from the following software programs and/or applications to ensure that the information is consistent with the expected content: \[assignment\].

## Discussion

Certain types of attacks, including SQL injections, produce output results that are unexpected or inconsistent with the output results that would be expected from software programs or applications. Information output filtering focuses on detecting extraneous content, preventing such extraneous content from being displayed, and then alerting monitoring tools that anomalous behavior has been discovered.

## Implementation guidance

No content available.

## CSF 2.0 subcategories

No content available.

## Related controls

- [SI-3](/md/controls/SI-3.md)
- [SI-4](/md/controls/SI-4.md)
- [SI-11](/md/controls/SI-11.md)

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.