id: "AU-13(02)" title: "Review of Monitored Sites" family: "AU" family_name: "Audit and Accountability" sort_id: "au-13.02" priority: "P2" implementation_level: "organization" parent: "AU-13" enhancement: True
Statement
Review the list of open-source information sites being monitored {{ insert: param, au-13.02_odp }}.
Guidance
Reviewing the current list of open-source information sites being monitored on a regular basis helps to ensure that the selected sites remain relevant. The review also provides the opportunity to add new open-source information sites with the potential to provide evidence of unauthorized disclosure of organizational information. The list of sites monitored can be guided and informed by threat intelligence of other credible sources of information.
Assessment Objective
the list of open-source information sites being monitored is reviewed {{ insert: param, au-13.02_odp }}.
Audit and accountability policy
system security plan
privacy plan
procedures addressing information disclosure monitoring
system design documentation
system configuration settings and associated documentation
reviews for open-source information sites being monitored
system audit records
other relevant documents or records
Organizational personnel with responsibilities for monitoring open-source information sites
organizational personnel with information security and privacy responsibilities
Mechanisms implementing monitoring for information disclosure