ezesecops/rmf-ato-core huggingface dataset:
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(14) > Assessment Methods

SI-4(14) Wireless Intrusion Detection - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring tools and techniques

system design documentation

system monitoring tools and techniques documentation

system configuration settings and associated documentation

system protocols

system audit records

system security plan

other relevant documents or records

Interview: System/network administrators

organizational personnel with information security responsibilities

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring the system

organizational personnel responsible for the intrusion detection system

Test: Organizational processes for intrusion detection

mechanisms supporting and/or implementing a wireless intrusion detection capability
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(14) > Assessment Objective

SI-4(14) Wireless Intrusion Detection - Assessment Objective
Determine if the following are satisfied:

SI-04(14)[01] a wireless intrusion detection system is employed to identify rogue wireless devices;
SI-04(14)[02] a wireless intrusion detection system is employed to detect attack attempts on the system;
SI-04(14)[03] a wireless intrusion detection system is employed to detect potential compromises or breaches to the system.
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(15) > Assessment Methods

SI-4(15) Wireless to Wireline Communications - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring tools and techniques

system design documentation

system monitoring tools and techniques documentation

system configuration settings and associated documentation

system protocols documentation

system audit records

system security plan

other relevant documents or records

Interview: System/network administrators

organizational personnel with information security responsibilities

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring the system

organizational personnel responsible for the intrusion detection system

Test: Organizational processes for intrusion detection and system monitoring

mechanisms supporting and/or implementing intrusion detection and system monitoring capabilities

mechanisms supporting and/or implementing a wireless intrusion detection capability
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(15) > Assessment Objective

SI-4(15) Wireless to Wireline Communications - Assessment Objective
Determine if the following are satisfied:

an intrusion detection system is employed to monitor wireless communications traffic as the traffic passes from wireless to wireline networks.
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(16) > Assessment Methods

SI-4(16) Correlate Monitoring Information - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring tools and techniques

system design documentation

system monitoring tools and techniques documentation

system configuration settings and associated documentation

event correlation logs or records

system audit records

system security plan

other relevant documents or records

Interview: System/network administrators

organizational personnel with information security responsibilities

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring the system

organizational personnel responsible for the intrusion detection system

Test: Organizational processes for intrusion detection and system monitoring

mechanisms supporting and/or implementing intrusion detection and system monitoring capabilities

mechanisms supporting and/or implementing the correlation of information from monitoring tools
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(16) > Assessment Objective

SI-4(16) Correlate Monitoring Information - Assessment Objective
Determine if the following are satisfied:

information from monitoring tools and mechanisms employed throughout the system is correlated.
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(17) > Assessment Methods

SI-4(17) Integrated Situational Awareness - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring tools and techniques

system design documentation

system monitoring tools and techniques documentation

system configuration settings and associated documentation

event correlation logs or records resulting from physical, cyber, and supply chain activities

system audit records

system security plan

supply chain risk management plan

other relevant documents or records

Interview: System/network administrators

organizational personnel with information security responsibilities

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring the system

organizational personnel responsible for the intrusion detection system

Test: Organizational processes for intrusion detection and system monitoring

mechanisms supporting and/or implementing intrusion detection and system monitoring capabilities

mechanisms supporting and/or implementing the correlation of information from monitoring tools
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(17) > Assessment Objective

SI-4(17) Integrated Situational Awareness - Assessment Objective
Determine if the following are satisfied:

information from monitoring physical, cyber, and supply chain activities are correlated to achieve integrated, organization-wide situational awareness.
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(18) > Assessment Methods

SI-4(18) Analyze Traffic and Covert Exfiltration - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring tools and techniques

system design documentation

network diagram

system monitoring tools and techniques documentation

system configuration settings and associated documentation

system monitoring logs or records

system audit records

system security plan

other relevant documents or records

Interview: System/network administrators

organizational personnel with information security responsibilities

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring the system

organizational personnel responsible for the intrusion detection system

Test: Organizational processes for intrusion detection and system monitoring

mechanisms supporting and/or implementing intrusion detection and system monitoring capabilities

mechanisms supporting and/or implementing an analysis of outbound communications traffic
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(18) > Assessment Objective

SI-4(18) Analyze Traffic and Covert Exfiltration - Assessment Objective
Determine if the following are satisfied:

SI-04(18)[01] outbound communications traffic is analyzed at interfaces external to the system to detect covert exfiltration of information;
SI-04(18)[02] outbound communications traffic is analyzed at [Assignment: organization-defined interior points] to detect covert exfiltration of information.
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(19) > Assessment Methods

SI-4(19) Risk for Individuals - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring

system design documentation

system monitoring tools and techniques documentation

system configuration settings and associated documentation

system audit records

system security plan

privacy plan

other relevant documents or records

Interview: System/network administrators

organizational personnel with information security and privacy responsibilities

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring the system

legal counsel

human resource officials

organizational personnel with personnel security responsibilities

Test: Organizational processes for system monitoring

mechanisms supporting and/or implementing a system monitoring capability
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(19) > Assessment Objective

SI-4(19) Risk for Individuals - Assessment Objective
Determine if the following are satisfied:

[Assignment: organization-defined additional monitoring] is implemented on individuals who have been identified by [Assignment: organization-defined sources] as posing an increased level of risk.
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(20) > Assessment Methods

SI-4(20) Privileged Users - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring tools and techniques

system design documentation

system monitoring tools and techniques documentation

system configuration settings and associated documentation

system monitoring logs or records

system audit records

system security plan

other relevant documents or records

Interview: System/network administrators

organizational personnel with information security responsibilities

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring the system

Test: Organizational processes for system monitoring

mechanisms supporting and/or implementing a system monitoring capability
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(20) > Assessment Objective

SI-4(20) Privileged Users - Assessment Objective
Determine if the following are satisfied:

[Assignment: organization-defined additional monitoring] of privileged users is implemented.
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(21) > Assessment Methods

SI-4(21) Probationary Periods - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring

system design documentation

system monitoring tools and techniques documentation

system configuration settings and associated documentation

system monitoring logs or records

system audit records

system security plan

other relevant documents or records

Interview: System/network administrators

organizational personnel with information security responsibilities

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring the system

Test: Organizational processes for system monitoring

mechanisms supporting and/or implementing a system monitoring capability
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(21) > Assessment Objective

SI-4(21) Probationary Periods - Assessment Objective
Determine if the following are satisfied:

[Assignment: organization-defined additional monitoring] of individuals is implemented during [Assignment: organization-defined probationary period].
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(22) > Assessment Methods

SI-4(22) Unauthorized Network Services - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring tools and techniques

system design documentation

system monitoring tools and techniques documentation

system configuration settings and associated documentation

documented authorization/approval of network services

notifications or alerts of unauthorized network services

system monitoring logs or records

system audit records

system security plan

other relevant documents or records

Interview: System/network administrators

organizational personnel with information security responsibilities

system developer

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring the system

Test: Organizational processes for system monitoring

mechanisms supporting and/or implementing a system monitoring capability

mechanisms for auditing network services

mechanisms for providing alerts
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(22) > Assessment Objective

SI-4(22) Unauthorized Network Services - Assessment Objective
Determine if the following are satisfied:

SI-04(22)(a) network services that have not been authorized or approved by [Assignment: organization-defined authorization or approval processes] are detected;
SI-04(22)(b) [Selection; one or more: audit; alert [Assignment: organization-defined personnel or roles] ] is/are initiated when network services that have not been authorized or approved by authorization or approval processes are detected.
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(23) > Assessment Methods

SI-4(23) Host-based Devices - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring tools and techniques

system design documentation

host-based monitoring mechanisms

system monitoring tools and techniques documentation

system configuration settings and associated documentation

list of system components requiring host-based monitoring

system monitoring logs or records

system audit records

system security plan

other relevant documents or records

Interview: System/network administrators

organizational personnel with information security responsibilities

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring system hosts

Test: Organizational processes for system monitoring

mechanisms supporting and/or implementing a host-based monitoring capability
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(23) > Assessment Objective

SI-4(23) Host-based Devices - Assessment Objective
Determine if the following are satisfied:

[Assignment: organization-defined host-based monitoring mechanisms] are implemented on [Assignment: organization-defined system components].
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(24) > Assessment Methods

SI-4(24) Indicators of Compromise - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring

system design documentation

system monitoring tools and techniques documentation

system configuration settings and associated documentation

system monitoring logs or records

system audit records

system security plan

other relevant documents or records

Interview: System/network administrators

organizational personnel with information security responsibilities

system developer

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring system hosts

Test: Organizational processes for system monitoring

organizational processes for the discovery, collection, distribution, and use of indicators of compromise

mechanisms supporting and/or implementing a system monitoring capability

mechanisms supporting and/or implementing the discovery, collection, distribution, and use of indicators of compromise
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(24) > Assessment Objective

SI-4(24) Indicators of Compromise - Assessment Objective
Determine if the following are satisfied:

SI-04(24)[01] indicators of compromise provided by [Assignment: organization-defined sources] are discovered;
SI-04(24)[02] indicators of compromise provided by [Assignment: organization-defined sources] are collected;
SI-04(24)[03] indicators of compromise provided by [Assignment: organization-defined sources] are distributed to [Assignment: organization-defined personnel or roles].
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(25) > Assessment Methods

SI-4(25) Optimize Network Traffic Analysis - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing system monitoring

system design documentation

system monitoring tools and techniques documentation

system configuration settings and associated documentation

system monitoring logs or records

system architecture

system audit records

network traffic reports

system security plan

other relevant documents or records

Interview: System/network administrators

organizational personnel with information security responsibilities

system developer

organizational personnel installing, configuring, and/or maintaining the system

organizational personnel responsible for monitoring system hosts

Test: Organizational processes for system monitoring

organizational processes for the discovery, collection, distribution, and use of indicators of compromise

mechanisms supporting and/or implementing a system monitoring capability

mechanisms supporting and/or implementing the discovery, collection, distribution, and use of indicators of compromise
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-4 > SI-4(25) > Assessment Objective

SI-4(25) Optimize Network Traffic Analysis - Assessment Objective
Determine if the following are satisfied:

SI-04(25)[01] visibility into network traffic at external system interfaces is provided to optimize the effectiveness of monitoring devices;
SI-04(25)[02] visibility into network traffic at key internal system interfaces is provided to optimize the effectiveness of monitoring devices.
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-5 > Assessment Methods

SI-5 Security Alerts, Advisories, and Directives - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing security alerts, advisories, and directives

records of security alerts and advisories

system security plan

other relevant documents or records

Interview: Organizational personnel with security alert and advisory responsibilities

organizational personnel implementing, operating, maintaining, and using the system

organizational personnel, organizational elements, and/or external organizations to whom alerts, advisories, and directives are to be disseminated

system/network administrators

organizational personnel with information security responsibilities

Test: Organizational processes for defining, receiving, generating, disseminating, and complying with security alerts, advisories, and directives

mechanisms supporting and/or implementing the definition, receipt, generation, and dissemination of security alerts, advisories, and directives

mechanisms supporting and/or implementing security directives
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-5 > Assessment Objective

SI-5 Security Alerts, Advisories, and Directives - Assessment Objective
Determine if the following are satisfied:

SI-05a. system security alerts, advisories, and directives are received from [Assignment: organization-defined external organizations] on an ongoing basis;
SI-05b. internal security alerts, advisories, and directives are generated as deemed necessary;
SI-05c. security alerts, advisories, and directives are disseminated to [Selection; one or more: [Assignment: organization-defined personnel or roles] ; [Assignment: organization-defined elements] ; [Assignment: organization-defined external organizations] ];
SI-05d. security directives are implemented in accordance with established time frames or if the issuing organization is notified of the degree of noncompliance.
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-5 > SI-5(1) > Assessment Methods

SI-5(1) Automated Alerts and Advisories - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing security alerts, advisories, and directives

system design documentation

system configuration settings and associated documentation

automated mechanisms supporting the distribution of security alert and advisory information

records of security alerts and advisories

system audit records

system security plan

other relevant documents or records

Interview: Organizational personnel with security alert and advisory responsibilities

organizational personnel implementing, operating, maintaining, and using the system

organizational personnel, organizational elements, and/or external organizations to whom alerts and advisories are to be disseminated

system/network administrators

organizational personnel with information security responsibilities

Test: Organizational processes for defining, receiving, generating, and disseminating security alerts and advisories

automated mechanisms supporting and/or implementing the dissemination of security alerts and advisories
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-5 > SI-5(1) > Assessment Objective

SI-5(1) Automated Alerts and Advisories - Assessment Objective
Determine if the following are satisfied:

[Assignment: organization-defined automated mechanisms] are used to broadcast security alert and advisory information throughout the organization.
Assessing Security and Privacy Controls in Information Systems and Organizations
SI > SI-6 > Assessment Methods

SI-6 Security and Privacy Function Verification - Assessment Methods and Objects

Examine: System and information integrity policy

system and information integrity procedures

procedures addressing security and privacy function verification

system design documentation

system configuration settings and associated documentation

alerts/notifications of failed security verification tests

list of system transition states requiring security functionality verification

system audit records

system security plan

privacy plan

other relevant documents or records

Interview: Organizational personnel with security and privacy function verification responsibilities

organizational personnel implementing, operating, and maintaining the system

system/network administrators

organizational personnel with information security and privacy responsibilities

system developer

Test: Organizational processes for security and privacy function verification

mechanisms supporting and/or implementing the security and privacy function verification capability