id: "CA-07(06)" title: "Automation Support for Monitoring" family: "CA" family_name: "Assessment, Authorization, and Monitoring" sort_id: "ca-07.06" priority: "P1" implementation_level: "system" parent: "CA-07" enhancement: True


Statement

Ensure the accuracy, currency, and availability of monitoring results for the system using {{ insert: param, ca-07.06_odp }}.

Guidance

Using automated tools for monitoring helps to maintain the accuracy, currency, and availability of monitoring information which in turns helps to increase the level of ongoing awareness of the system security and privacy posture in support of organizational risk management decisions.

Assessment Objective

{{ insert: param, ca-07.06_odp }} are used to ensure the accuracy, currency, and availability of monitoring results for the system.

Assessment, authorization, and monitoring policy

organizational continuous monitoring strategy

system-level continuous monitoring strategy

procedures addressing continuous monitoring of system controls

assessment report

plan of action and milestones

system monitoring records

impact analyses

status reports

system security plan

privacy plan

other relevant documents or records

Organizational personnel with continuous monitoring responsibilities

organizational personnel with information security and privacy responsibilities

Mechanisms supporting automated monitoring