NIST Special Publication 800-171 Revision 2
IDName
3.14.6Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks