Navigate

SI-4(3)

SI-4(3): Automated Tool and Mechanism Integration

Employ automated tools and mechanisms to integrate intrusion detection tools and mechanisms into access control and flow control mechanisms.

Supplemental

Using automated tools and mechanisms to integrate intrusion detection tools and mechanisms into access and flow control mechanisms facilitates a rapid response to attacks by enabling the reconfiguration of mechanisms in support of attack isolation and elimination.

CIA Levels
Confidentiality	unknown
Integrity	unknown
Availability	unknown

Overlays
DAF Baseline, NC3

CSF Categories
None

Related Controls

The controls below (if any) were marked by NIST as being related to SI-4(3).

Control	Description
PM-23	Establish a Data Governance Body consisting of [the roles of a Data Governance Body are defined;] with [the responsibilities of a Data Governance Body are defined;].
PM-25	a: Develop, document, and implement policies and procedures that address the use of personally identifiable information for internal testing, training, and research; b: Limit or minimize the amount of personally identifiable information used for internal testing, training, and research purposes; c: Authorize the use of personally identifiable information when such information is required for internal testing, training, and research; and d: Review and update policies and procedures [one of ].

Control

Description

PM-23

Establish a Data Governance Body consisting of [the roles of a Data Governance Body are defined;] with [the responsibilities of a Data Governance Body are defined;].

PM-25

a: Develop, document, and implement policies and procedures that address the use of personally identifiable information for internal testing, training, and research;

b: Limit or minimize the amount of personally identifiable information used for internal testing, training, and research purposes;

c: Authorize the use of personally identifiable information when such information is required for internal testing, training, and research; and

d: Review and update policies and procedures [one of ].

Enhancements

The controls below (if any) add on to the requirements of SI-4(3).

Control	Description
No controls

Related CCIs

The CCIs below are tied to SI-4(3).

CCI	Definition
CCI-002657	Employ automated tools to integrate intrusion detection tools into access control mechanisms.
CCI-002658	Employ automated tools to integrate intrusion detection tools into flow control mechanisms.
CCI-004969	Employ automated mechanisms to integrate intrusion detection mechanisms into access control mechanisms.
CCI-004970	Employ automated mechanisms to integrate intrusion detection mechanisms into flow control mechanisms.