CCI-002687

Implement organization-defined host-based monitoring mechanisms at organization-defined system components.

Implementation Guidance

The organization being inspected/assessed documents and implements HBSS at all components. DoD has defined the host-based monitoring mechanisms as HBSS. DoD has defined the information system components as all components.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines documentation of the use of HBSS to ensure the organization being inspected/assessed implements HBSS at all components. The organization being inspected/assessed may be required to demonstrate use of HBSS. DoD has defined the host-based monitoring mechanisms as HBSS. DoD has defined the information system components as all components.

Compelling Evidence

1.) Signed and dated System security plan documents the use of HBSS.

The controls below (if any) were marked by NIST as being related to CCI-002687.