SM-16—Security Monitoring Alert Criteria: Guest, Anonymous and Temp Accounts

1. Inspect Organization's Security Monitoring Standard to determine whether requirements for security monitoring alert criteria for the use of guest, anonymous, and temporary accounts on Organization's network are defined. 2. Inspect a sample of security monitoring rules, to validate that the rules are defined to look for and alert applicable personnel on the use of guest, anonymous, and temporary accounts on Organization's network. 3. Validate that alerts being generated are sent to the SOC team to support remediation.