Navigate

SI-4 (9)

SI-4 (9): Testing Of Monitoring Tools

The organization tests intrusion-monitoring tools [Assignment: organization-defined frequency].

Supplemental

Testing intrusion-monitoring tools is necessary to ensure that the tools are operating correctly and continue to meet the monitoring objectives of organizations. The frequency of testing depends on the types of tools used by organizations and methods of deployment.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
Cross Domain (Access), Cross Domain (Multilevel), Cross Domain (Transfer), NC3

Related Controls

The controls below (if any) were marked by NIST as being related to SI-4 (9).

Control	Description
CP-9	The organization: CP-9a.: Conducts backups of user-level information contained in the information system [Assignment: organization-defined frequency consistent with recovery time and recovery point objectives]; CP-9b.: Conducts backups of system-level information contained in the information system [Assignment: organization-defined frequency consistent with recovery time and recovery point objectives]; CP-9c.: Conducts backups of information system documentation including security-related documentation [Assignment: organization-defined frequency consistent with recovery time and recovery point objectives]; and CP-9d.: Protects the confidentiality, integrity, and availability of backup information at storage locations.

Control

Description

CP-9

The organization:

CP-9a.: Conducts backups of user-level information contained in the information system [Assignment: organization-defined frequency consistent with recovery time and recovery point objectives];

CP-9b.: Conducts backups of system-level information contained in the information system [Assignment: organization-defined frequency consistent with recovery time and recovery point objectives];

CP-9c.: Conducts backups of information system documentation including security-related documentation [Assignment: organization-defined frequency consistent with recovery time and recovery point objectives]; and

CP-9d.: Protects the confidentiality, integrity, and availability of backup information at storage locations.

Enhancements

The controls below (if any) add on to the requirements of SI-4 (9).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SI-4 (9).

CCI	Definition
CCI-001270	The organization tests intrusion monitoring tools at an organization-defined frequency.
CCI-001271	The organization defines the frequency for testing intrusion monitoring tools.