SI-4(23)

Requirement

Implement the following host-based monitoring mechanisms at [Assignment: organization-defined system components]: [Assignment: organization-defined host-based monitoring mechanisms].

Discussion

Host-based monitoring collects information about the host (or system in which it resides). System components in which host-based monitoring can be implemented include servers, notebook computers, and mobile devices. Organizations may consider employing host-based monitoring mechanisms from multiple product developers or vendors.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: System and information integrity policy; system and information integrity procedures; procedures addressing system monitoring tools and techniques; system design documentation; host-based monitoring mechanisms; system monitoring tools and techniques documentation; system configuration settings and associated documentation; list of system components requiring host-based monitoring; system monitoring logs or records; system audit records; system security plan; other relevant documents or records].

Interview

[SELECT FROM: System/network administrators; organizational personnel with information security responsibilities; organizational personnel installing, configuring, and/or maintaining the system; organizational personnel responsible for monitoring system hosts].

Test

[SELECT FROM: Organizational processes for system monitoring; mechanisms supporting and/or implementing a host-based monitoring capability].

ID	Assessment Objectives
SI-04(23)	<SI-04(23)_ODP[01] host-based monitoring mechanisms> are implemented on <SI-04(23)_ODP[02] system components>.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!