+DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events

DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events

Statement

Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events

Guidance

Monitor email, web, file sharing, collaboration services, and other common attack vectors to detect malware, phishing, data leaks and exfiltration, and other adverse events

Guidance

Monitor authentication attempts to identify attacks against credentials and unauthorized credential reuse

Guidance

Monitor software configurations for deviations from security baselines

Guidance

Monitor hardware and software for signs of tampering

Guidance

Use technologies with a presence on endpoints to detect cyber health issues (e.g., missing patches, malware infections, unauthorized software), and redirect the endpoints to a remediation environment before access is authorized

1. Panoramica

Titolo Standard

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti
Fonte Requisito

3. Regolamentazioni correlate

Regolamentazioni
Fonte Regolamentazione

Ticket collegati