-
a: Monitor [open-source information and/or information sites to be monitored for evidence of unauthorized disclosure of organizational information is/are defined;] [the frequency with which open-source information and/or information sites are monitored for evidence of unauthorized disclosure of organizational information is defined;] for evidence of unauthorized disclosure of organizational information; and
-
b: If an information disclosure is discovered:
-
1: Notify [personnel or roles to be notified if an information disclosure is discovered is/are defined;] ; and
-
2: Take the following additional actions: [additional actions to be taken if an information disclosure is discovered are defined;].
Supplemental
Unauthorized disclosure of information is a form of data leakage. Open-source information includes social networking sites and code-sharing platforms and repositories. Examples of organizational information include personally identifiable information retained by the organization or proprietary information generated by the organization.