ComplianceNIST 800-53 enhancement
NIST-SI-4(7) Automated Response to Suspicious Events
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- SI System and Information Integrity
- Control
- SI-4(7)
Control statement
(a) Notify [Assignment: incident response personnel] of detected suspicious events; and
(b) Take the following actions upon detection: [Assignment: least-disruptive actions].
Discussion
Least-disruptive actions include initiating requests for human responses.
Related
Enhancement of · Compliance (1)
- NIST-SI-4 System Monitoring NIST 800-53 control