The organization implements [Assignment: organization-defined host-based monitoring mechanisms] at [Assignment: organization-defined information system components].
HBSS
all components
Source:
DoD RMF TAG
NOTE: DISA will evaluate Commercial CSP equivalencies on a case by case basis.
Information system components where host-based monitoring can be implemented include, for example, servers, workstations, and mobile devices. Organizations consider employing host-based monitoring mechanisms from multiple information technology product developers.