---

id: "DE.CM-06" title: "Continuous Monitoring" function: "DE" function_name: "Detect" category: "DE.CM" category_name: "Continuous Monitoring" description: "External service provider activity is monitored." controls: - CA-7 - SA-4 - SA-5 - SI-4 - SR-2 - SR-4 - SR-5

---

DE.CM-06: Continuous Monitoring

Description

External service provider activity is monitored.

Category Context

Function: DE — Detect Category: DE.CM — Continuous Monitoring

The information system and assets are monitored to identify cybersecurity events.

Mapped SP 800-53 Controls

• CA-7 (Assessment, Authorization, and Monitoring) — View Control
• SA-4 (System and Services Acquisition) — View Control
• SA-5 (System and Services Acquisition) — View Control
• SI-4 (System and Information Integrity) — View Control
• SR-2 (Supply Chain Risk Management) — View Control
• SR-4 (Supply Chain Risk Management) — View Control
• SR-5 (Supply Chain Risk Management) — View Control