← Back to catalog
SI-4(7)

Automated Response to Suspicious Events

System and Information Integrity (SI)
Baselines
Low · Not includedModerate · Not includedHigh · Not included
Description

Notify [assignment] of detected suspicious events; and Take the following actions upon detection: [assignment].

Discussion

Least-disruptive actions include initiating requests for human responses.

Implementation guidance

No content available.

CSF 2.0 crosswalk

No CSF mappings exist for this control.