Assessment Objectives

In addition to relevant policies, standards and procedures, the assessor shall examine, interview, and/or test to determine if appropriately scoped evidence exists to support the claim that:

• MON-37_A01 authorized Control Assurance Automation (CAA) collection activities are documented, including the collecting system or service account, the data sources accessed, the data collected, the destination repository and the collection schedule.
  Assessment rigor: 1
  Origin: SCF Created
• MON-37_A02 the frequency at which observed Control Assurance Automation (CAA) collection activity is reconciled against authorized collection activities is defined.
  Defined parameters: at least quarterly
  Assessment rigor: 1
  Origin: SCF Created
• MON-37_A03 Control Assurance Automation (CAA) collection activity observed in network and Technology Assets, Applications and/or Services (TAAS) logs is reconciled against the documented authorized collection activities at the defined frequency.
  Assessment rigor: 1
  Origin: SCF Created
• MON-37_A04 collection activity that cannot be reconciled to an authorized Control Assurance Automation (CAA) activity is treated as potential unauthorized data exfiltration and investigated in accordance with incident response procedures.
  Assessment rigor: 1
  Origin: SCF Created
• MON-37_A05 monitoring and data loss prevention rules are configured to recognize authorized Control Assurance Automation (CAA) collection so that alerts distinguish legitimate collection from unauthorized data exfiltration.
  Assessment rigor: 1
  Origin: SCF Created

Länkade ärenden

• Secure Controls Framework -

  EN: GRCA includes the Secure Controls Framework® (SCF) content, © Secure Controls Framework Council, LLC, used under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. SCF control numbers, names, descriptions and mappings appear exactly as published by the SCF Council – https://securecontrolsframework.com. GRCA may group or reorder SCF content for display, which does not change SCF content; the mappings are shown as links to the frameworks they name. Learn more at https://securecontrolsframework.com.

  DE: GRCA enthält Inhalte des Secure Controls Framework® (SCF), © Secure Controls Framework Council, LLC, genutzt unter der Creative Commons Attribution-NoDerivatives 4.0 International Public License. Nummern, Namen, Beschreibungen und Zuordnungen der SCF-Controls erscheinen genau so, wie der SCF Council sie veröffentlicht – https://securecontrolsframework.com. GRCA gruppiert oder sortiert SCF-Inhalte für die Anzeige, ohne sie zu verändern; die Zuordnungen erscheinen als Verknüpfungen zu den genannten Regelwerken. Mehr unter https://securecontrolsframework.com.