id: "SI-04(21)" title: "Probationary Periods" family: "SI" family_name: "System and Information Integrity" sort_id: "si-04.21" priority: "P1" implementation_level: "organization" parent: "SI-04" enhancement: True


Statement

Implement the following additional monitoring of individuals during {{ insert: param, si-04.21_odp.02 }}: {{ insert: param, si-04.21_odp.01 }}.

Guidance

During probationary periods, employees do not have permanent employment status within organizations. Without such status or access to information that is resident on the system, additional monitoring can help identify any potentially malicious activity or inappropriate behavior.

Assessment Objective

{{ insert: param, si-04.21_odp.01 }} of individuals is implemented during {{ insert: param, si-04.21_odp.02 }}.

System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring

system design documentation

system monitoring tools and techniques documentation

system configuration settings and associated documentation

system monitoring logs or records

system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring the system

Organizational processes for system monitoring

mechanisms supporting and/or implementing a system monitoring capability