Under active development Content is continuously updated and improved

SM-31System Availability Monitoring

>Control Description

Critical systems are monitored in accordance with predefined availability criteria and alerts are sent to authorized personnel.

Theme

Process

Type

Corrective

Policy/Standard

Information Systems Operations Policy

>Implementation Guidance

1. Ensure that a documented Availability Monitoring Standard is present including requirements defined for responding to alerts and confirmed incidents. 2. Ensure that a process has been established which generates alerts against the availability incidents identified. 3. Ensure that the alerts are resolved in a timely manner by authorized personnel.

>Testing Procedure

1. Inspect Organization's Availability Monitoring Standard to determine whether requirements are defined for responding to alerts and confirmed incidents. 2. Inspect a sample of availability incident tickets from alerts generated to determine whether the alerts were resolved in a timely manner by authorized personnel.

>Audit Artifacts

E-SM-22
E-SM-26

>Framework Mappings

Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.

Ask AI

Configure your API key to use AI features.