id: "SI-04(03)" title: "Automated Tool and Mechanism Integration" family: "SI" family_name: "System and Information Integrity" sort_id: "si-04.03" priority: "P1" implementation_level: "system" parent: "SI-04" enhancement: True
Statement
Employ automated tools and mechanisms to integrate intrusion detection tools and mechanisms into access control and flow control mechanisms.
Guidance
Using automated tools and mechanisms to integrate intrusion detection tools and mechanisms into access and flow control mechanisms facilitates a rapid response to attacks by enabling the reconfiguration of mechanisms in support of attack isolation and elimination.
Assessment Objective: automated tools and mechanisms are employed to integrate intrusion detection tools and mechanisms into access control mechanisms;
Assessment Objective: automated tools and mechanisms are employed to integrate intrusion detection tools and mechanisms into flow control mechanisms.
System and information integrity policy
system and information integrity procedures
access control policy and procedures
procedures addressing system monitoring tools and techniques
system design documentation
system monitoring tools and techniques documentation
system configuration settings and associated documentation
system audit records
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
organizational personnel installing, configuring, and/or maintaining the system
organizational personnel responsible for monitoring the system
organizational personnel responsible for the intrusion detection system
Organizational processes for intrusion detection and system monitoring
mechanisms supporting and/or implementing the intrusion detection and system monitoring capability
mechanisms and tools supporting and/or implementing the access and flow control capabilities
mechanisms and tools supporting and/or implementing the integration of intrusion detection tools into the access and flow control mechanisms