+DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events

DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events

Statement

Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events

Guidance

Monitor email, web, file sharing, collaboration services, and other common attack vectors to detect malware, phishing, data leaks and exfiltration, and other adverse events

Guidance

Monitor authentication attempts to identify attacks against credentials and unauthorized credential reuse

Guidance

Monitor software configurations for deviations from security baselines

Guidance

Monitor hardware and software for signs of tampering

Guidance

Use technologies with a presence on endpoints to detect cyber health issues (e.g., missing patches, malware infections, unauthorized software), and redirect the endpoints to a remediation environment before access is authorized

1. Apžvalga

Pavadinimas Standartas

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

Reikalavimai
Šaltinis Reikalavimas

3. Susiję teisės aktai

Teisės aktai
Šaltinis Reguliavimas

Susietos užduotys