id: "SI-04(09)" title: "Testing of Monitoring Tools and Mechanisms" family: "SI" family_name: "System and Information Integrity" sort_id: "si-04.09" priority: "P1" implementation_level: "organization" parent: "SI-04" enhancement: True
Statement
Test intrusion-monitoring tools and mechanisms {{ insert: param, si-04.09_odp }}.
Guidance
Testing intrusion-monitoring tools and mechanisms is necessary to ensure that the tools and mechanisms are operating correctly and continue to satisfy the monitoring objectives of organizations. The frequency and depth of testing depends on the types of tools and mechanisms used by organizations and the methods of deployment.
Assessment Objective
intrusion-monitoring tools and mechanisms are tested {{ insert: param, si-04.09_odp }}.
System and information integrity policy
system and information integrity procedures
procedures addressing the testing of system monitoring tools and techniques
documentation providing evidence of testing intrusion-monitoring tools
system security plan
other relevant documents or records
System/network administrators
organizational personnel with information security responsibilities
organizational personnel installing, configuring, and/or maintaining the system
organizational personnel responsible for monitoring the system
organizational personnel responsible for the intrusion detection system
Organizational processes for intrusion detection and system monitoring
mechanisms supporting and/or implementing intrusion detection and system monitoring capabilities
mechanisms supporting and/or implementing the testing of intrusion-monitoring tools