---

id: "SI-04(23)" title: "Host-based Devices" family: "SI" family_name: "System and Information Integrity" sort_id: "si-04.23" priority: "P1" implementation_level: "organization" parent: "SI-04" enhancement: True

---

Statement

Implement the following host-based monitoring mechanisms at {{ insert: param, si-04.23_odp.02 }}: {{ insert: param, si-04.23_odp.01 }}.

Guidance

Host-based monitoring collects information about the host (or system in which it resides). System components in which host-based monitoring can be implemented include servers, notebook computers, and mobile devices. Organizations may consider employing host-based monitoring mechanisms from multiple product developers or vendors.

Assessment Objective

{{ insert: param, si-04.23_odp.01 }} are implemented on {{ insert: param, si-04.23_odp.02 }}.

System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring tools and techniques

system design documentation

host-based monitoring mechanisms

system monitoring tools and techniques documentation

system configuration settings and associated documentation

list of system components requiring host-based monitoring

system monitoring logs or records

system audit records

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring system hosts

Organizational processes for system monitoring

mechanisms supporting and/or implementing a host-based monitoring capability