CCI-002661

Monitor inbound communications traffic per organization-defined frequency for organization-defined unusual or unauthorized activities or conditions.

Implementation Guidance

The organization being inspected/assessed configures the information system to monitor inbound communications traffic continuously for unusual or unauthorized activities or conditions. DoD has defined the frequency as continuously.

Validation Procedures

The organization conducting the inspection/assessment examines the information system to ensure the organization being inspected/assessed configures the information system to monitor inbound communications traffic continuously for unusual or unauthorized activities or conditions. DoD has defined the frequency as continuously.

Compelling Evidence

1.) Signed and dated system security plan documents how incoming communications are monitored for unusual or unauthorized activities or conditions and the frequency of that monitoring (DoD recommendation is continuously). 2.) Incoming communication logs (accurate date/time stamps required).

The controls below (if any) were marked by NIST as being related to CCI-002661.