MON-18
File Activity Monitoring (FAM)
Description
Automated mechanisms exist to monitor sensitive/regulated data in Technology Assets, Applications and/or Services (TAAS) and data repositories.
Control Question
Does the organization use automated tools to monitor sensitive/regulated data in Technology Assets, Applications and/or Services (TAAS) and data repositories?
Control Metadata
Domain:
Continuous Monitoring
Validation Cadence:
Quarterly