SM-19—Prohibited Activity Monitoring: Client Run Time Technologies

>Control Description

Organization monitors and flags the use of prohibited client run time technologies on information systems.

Theme

Technology

Type

Detective

Policy/Standard

Logging & Monitoring Standard

>Implementation Guidance

1. Ensure that the monitoring software are installed on information systems. 2. Enable the alerting criteria to ensure it monitors prohibited execution.

>Testing Procedure

1. Validate and inspect if monitoring software are installed on information systems. 2. Inspect the alerting criteria to ensure it monitors prohibited execution.