SI-4 (2)

SI-4 (2) H M

The organization employs automated tools to support near real-time analysis of events.

Supplemental Guidance

Automated tools include, for example, host-based, network-based, transport-based, or storage-based event monitoring tools or Security Information and Event Management (SIEM) technologies that provide real time analysis of alerts and/or notifications generated by organizational information systems.