+DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events

DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events

Statement

Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events

Guidance

Monitor email, web, file sharing, collaboration services, and other common attack vectors to detect malware, phishing, data leaks and exfiltration, and other adverse events

Guidance

Monitor authentication attempts to identify attacks against credentials and unauthorized credential reuse

Guidance

Monitor software configurations for deviations from security baselines

Guidance

Monitor hardware and software for signs of tampering

Guidance

Use technologies with a presence on endpoints to detect cyber health issues (e.g., missing patches, malware infections, unauthorized software), and redirect the endpoints to a remediation environment before access is authorized

1. Przegląd

Tytuł Norma

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania
Źródło Wymaganie

3. Powiązane regulacje

Regulacje
Źródło Regulacja

Powiązane zgłoszenia