CCI-001273

Analyze outbound communications traffic at the external interfaces to the system to discover anomalies.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to analyze outbound communications traffic at the external boundary of the information system to discover anomalies. The organization must maintain a record of any discovered anomalies.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process as well as the record of any discovered anomalies to ensure the organization being inspected/assessed analyzes outbound communications traffic at the external boundary of the information system to discover anomalies.

Compelling Evidence

1.) Signed and dated system security plan documents a process to analyze outbound communications traffic at the external boundary of the information system to discover anomalies. 2.) Record of any discovered anomalies.

The controls below (if any) were marked by NIST as being related to CCI-001273.