CCI-002665

The organization defines the encrypted communications traffic that is to be visible to organization-defined information system monitoring tools.

Implementation Guidance

The organization being inspected/assessed defines and documents the encrypted communications traffic that are to be visible to organization-defined information system monitoring tools. DoD has determined the encrypted traffic is not appropriate to define at the Enterprise level.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented encrypted traffic to ensure the organization being inspected/assessed defines the encrypted communications traffic that are to be visible to organization-defined information system monitoring tools. DoD has determined the encrypted traffic is not appropriate to define at the Enterprise level.

Compelling Evidence

1.) Signed and dated system security plan defines the encrypted communications traffic that are to be visible to organization-defined information system monitoring tools.

The controls below (if any) were marked by NIST as being related to CCI-002665.