HOME

SI-4 (4)

SI-4 (4) H M
Description

The information system monitors inbound and outbound communications traffic [Assignment: organization-defined frequency] for unusual or unauthorized activities or conditions.

FedRAMP
  • H SI-4 (4) [continuously]
  • M SI-4 (4) [continuously]
DISA Cloud Computing SRG

Continuously

Source:
DoD RMF TAG

Supplemental Guidance

Unusual/unauthorized activities or conditions related to information system inbound and outbound communications traffic include, for example, internal traffic that indicates the presence of malicious code within organizational information systems or propagating among system components, the unauthorized exporting of information, or signaling to external information systems. Evidence of malicious code is used to identify potentially compromised information systems or information system components.