Roles and responsibilities for detection are well defined to ensure accountability
Detection activities comply with all applicable requirements
Detection processes are tested
Event detection information is communicated
Detection processes are continuously improved
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final