SI-4(9): Testing Of Monitoring Tools

Control Family:

System And Information Integrity

Parent Control:

SI-4: Information System Monitoring

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

ID.RA-1
PR.DS-5
PR.IP-8
DE.AE-1
DE.AE-2
DE.AE-3
DE.AE-4
DE.CM-1
DE.CM-5
DE.CM-6
DE.CM-7
DE.DP-2
DE.DP-3
DE.DP-4
RS.AN-1
RS.CO-3

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
SI-4(9): Testing of Monitoring Tools and Mechanisms

Control Statement

The organization tests intrusion-monitoring tools [Assignment: organization-defined frequency].

Supplemental Guidance

Testing intrusion-monitoring tools is necessary to ensure that the tools are operating correctly and continue to meet the monitoring objectives of organizations. The frequency of testing depends on the types of tools used by organizations and methods of deployment.