CCI-002667

Make provisions so that organization-defined encrypted communications traffic is visible to organization-defined system monitoring tools.

Implementation Guidance

The organization being inspected/assessed makes provisions so that encrypted communications traffic defined in SI-4 (10), CCI 2665 is visible to information system monitoring tools defined in SI-4 (10), CCI 2666.

Validation Procedures

The organization conducting the inspection/assessment examines the information system architecture to verify that the encrypted communications traffic is visible to information system monitoring tools defined in SI-4 (10), CCI 2666.

Compelling Evidence

1.) Information system Architecture documentation. 2.) Configuration documentation for information system architecture so encrypted communications traffic is visible to information system monitoring tools defined in SI-4 (10), CCI 2666.

The controls below (if any) were marked by NIST as being related to CCI-002667.