SM-30—Availability Monitoring Alert Criteria Review

>Control Description

Organization reviews availability monitoring alert criteria on an annual basis.

Theme

Process

Type

Corrective

Policy/Standard

Logging & Monitoring Standard

>Implementation Guidance

1. Ensure that a documented Security Monitoring Standard is present including process regarding availability monitoring alert criteria. 2.. Ensure that the availability monitoring alerts are reviewed on an annual basis.

>Testing Procedure

1. Inspect Security Monitoring Standard to ensure process regarding availability monitoring alert criteria is defined. 2. Inspect evidence of availability monitoring alerts to ensure it is reviewed on an annual basis.