NIST-SI-4(22) Unauthorized Network Services

(a) Detect network services that have not been authorized or approved by [Assignment: authorization or approval processes] ; and (b) [Selection (one or more of): audit; alert {{ insert: param, si-04.22_odp.03 }} ] when detected.

Unauthorized or unapproved network services include services in service-oriented architectures that lack organizational verification or validation and may therefore be unreliable or serve as malicious rogues for valid services.