Automated security monitoring

{
  "id": "MLC-T-CYB-000365",
  "term": "Automated security monitoring",
  "field": "Cybersecurity",
  "definition": "1. Use of automated procedures to ensure security controls are not circumvented or the use of these tools to track actions taken by subjects suspected of misusing the information system.\n\n2. Maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions.\n\n3. Maintaining ongoing awareness to support organizational risk decisions.",
  "synonyms": [
    "continuous monitoring",
    "information security continuous monitoring"
  ],
  "references": [
    "CNSSI 4009-2022",
    "CNSSI 4009-2022 from NIST SP 800-137 (adapted)",
    "NIST SP 800-137A from NIST SP 800-37 Rev. 2; NIST SP 800-37 Rev. 2; NIST SP 800-53 Rev. 5 from NIST SP 800-137; NIST SP 800-53A Rev. 5 from NIST SP 800-137",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/automated-security-monitoring/"
}