ComplianceNIST 800-53 control

NIST-AU-13 Monitoring for Information Disclosure

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
AU Audit and Accountability
Control
AU-13

Control statement

a. Monitor [Assignment: open-source information and/or information sites] [Assignment: frequency] for evidence of unauthorized disclosure of organizational information; and b. If an information disclosure is discovered: 1. Notify [Assignment: personnel or roles] ; and 2. Take the following additional actions: [Assignment: additional actions].

Discussion

Unauthorized disclosure of information is a form of data leakage. Open-source information includes social networking sites and code-sharing platforms and repositories. Examples of organizational information include personally identifiable information retained by the organization or proprietary information generated by the organization.

Related

Related control · Compliance (6)

  • NIST-AC-22 Publicly Accessible Content NIST 800-53 control
  • NIST-PE-3 Physical Access Control NIST 800-53 control
  • NIST-PM-12 Insider Threat Program NIST 800-53 control
  • NIST-RA-5 Vulnerability Monitoring and Scanning NIST 800-53 control
  • NIST-SC-7 Boundary Protection NIST 800-53 control
  • NIST-SI-20 Tainting NIST 800-53 control

Referenced by Compliance · enhancement of (3)

  • NIST-AU-13(1) Use of Automated Tools NIST 800-53 enhancement
  • NIST-AU-13(2) Review of Monitored Sites NIST 800-53 enhancement
  • NIST-AU-13(3) Unauthorized Replication of Information NIST 800-53 enhancement

Referenced by Compliance · has member (1)

  • NIST-AU Audit and Accountability NIST 800-53 family

Referenced by Compliance · related control (10)

  • NIST-AC-22 Publicly Accessible Content NIST 800-53 control
  • NIST-CA-7 Continuous Monitoring NIST 800-53 control
  • NIST-PE-3 Physical Access Control NIST 800-53 control
  • NIST-PL-4(1) Social Media and External Site/Application Usage Restrictions NIST 800-53 enhancement
  • NIST-PM-12 Insider Threat Program NIST 800-53 control
  • NIST-PM-31 Continuous Monitoring Strategy NIST 800-53 control
  • NIST-RA-5(4) Discoverable Information NIST 800-53 enhancement
  • NIST-SC-7 Boundary Protection NIST 800-53 control
  • NIST-SI-20 Tainting NIST 800-53 control
  • NIST-SI-4 System Monitoring NIST 800-53 control