DE.CM-03 Personnel activity and technology usage are monitored to find potentially adverse events

Statement

Personnel activity and technology usage are monitored to find potentially adverse events

Guidance

Use behavior analytics software to detect anomalous user activity to mitigate insider threats

Guidance

Monitor logs from logical access control systems to find unusual access patterns and failed access attempts

Guidance

Continuously monitor deception technology, including user accounts, for any usage

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final