CCI-002647

The organization protects information obtained from intrusion-monitoring tools from unauthorized access.

Implementation Guidance

The organization being inspected/assessed documents and implements a process to protect information obtained from intrusion-monitoring tools from unauthorized access.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented process to ensure the organization being inspected/assessed protects information obtained from intrusion-monitoring tools from unauthorized access.

Compelling Evidence

1.) List of users authorized to have access to Intrusion Monitoring tools and resultant information. 2.) Documentation and evidence (security logs that show access records to this restricted information) that only those authorized users have access to specified tools and information.

The controls below (if any) were marked by NIST as being related to CCI-002647.