In the list of operational controls, what does SI stand for?

• A. Systems and Information
• B. Security Integration
• C. System Interface
• D. Supervisory Interface

Answer: (A)

System and Information Integrity is the designation used for the operational control family that focuses on maintaining the trustworthy operation of information systems and the accuracy and reliability of the information they handle. In the FISMA/NIST framework, SI covers measures that detect, prevent, and correct issues that could compromise system and information integrity, such as protecting against malware, ensuring software and data integrity, and monitoring for and responding to security incidents.

Among the given options, the wording that closest matches this concept is the one referring to systems and information, since it conveys protecting both the system and its information. The other terms—Security Integration, System Interface, and Supervisory Interface—are not the standard names for this control family. So, the choice reflecting Systems and Information aligns with the intended SI designation, even though the official full name is System and Information Integrity.