Detections
Analytics
800-53|IR-5
Title
INCIDENT MONITORINGDescription
The organization tracks and documents information system security incidents.Supplemental
Documenting information system security incidents includes, for example, maintaining records about each incident, the status of the incident, and other pertinent information necessary for forensics, evaluating incident details, trends, and handling. Incident information can be obtained from a variety of sources including, for example, incident reports, incident response teams, audit monitoring, network monitoring, physical access monitoring, and user/administrator reports.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Related: AU-6,IR-8,PE-6,SC-5,SC-7,SI-3,SI-4,SI-7
Category: INCIDENT RESPONSE
Family: INCIDENT RESPONSE
Priority: P1
Baseline Impact: LOW,MODERATE,HIGH
Audit Items
View all Reference Audit Items