DE.CM-01 Networks and network services are monitored to find potentially adverse events

Statement

Networks and network services are monitored to find potentially adverse events

Guidance

Monitor DNS, BGP, and other network services for adverse events

Guidance

Monitor wired and wireless networks for connections from unauthorized endpoints

Guidance

Monitor facilities for unauthorized or rogue wireless networks

Guidance

Compare actual network flows against baselines to detect deviations

Guidance

Monitor network communications to identify changes in security postures for zero trust purposes

1. Overview

1.1 References

• 4.3 Crisis management
• 6.7 Network security
• 6.9 Protection against malicious and unauthorised software

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final