AU-13(1)

Requirement

Monitor open-source information and information sites using [Assignment: organization-defined automated mechanisms].

Discussion

Automated mechanisms include commercial services that provide notifications and alerts to organizations and automated scripts to monitor new posts on websites.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Audit and accountability policy; system security plan; privacy plan; procedures addressing information disclosure monitoring; system design documentation; system configuration settings and associated documentation; automated monitoring tools; system audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with responsibilities for monitoring information disclosures; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Automated mechanisms implementing monitoring for information disclosure].

ID	Assessment Objectives
AU-13(01)	open-source information and information sites are monitored using <AU-13(01)_ODP automated mechanisms>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!