SI-4(2): Automated Tools For Real-Time Analysis


  • Moderate
  • High

Next Version:

Control Statement

The organization employs automated tools to support near real-time analysis of events.

Supplemental Guidance

Automated tools include, for example, host-based, network-based, transport-based, or storage-based event monitoring tools or Security Information and Event Management (SIEM) technologies that provide real time analysis of alerts and/or notifications generated by organizational information systems.