Compliancemanzill.com
NIST 800-53 rev.5

NIST 800-53 rev.5/System and Information Integrity/902 of 1011

SI-04 (07)System Monitoring | Automated Response to Suspicious Events

Control family: System and Information Integrity

Control description

(a) Notify [Assignment: organization-defined incident response personnel (identified by name and/or by role)] of detected suspicious events; and

(b) Take the following actions upon detection: [Assignment: organization-defined least-disruptive actions to terminate suspicious events].

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.