DE.CM-03 Personnel activity and technology usage are monitored to find potentially adverse events

Statement

Personnel activity and technology usage are monitored to find potentially adverse events

Example

Use behavior analytics software to detect anomalous user activity to mitigate insider threats

Example

Monitor logs from logical access control systems to find unusual access patterns and failed access attempts

Example

Continuously monitor deception technology, including user accounts, for any usage

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

3. Regolamentazioni correlate

Ticket collegati

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final