focused observation

{
  "id": "MLC-T-CYB-001775",
  "term": "focused observation",
  "field": "Cybersecurity",
  "definition": "The act of directed (focused) attention to a party or parties alleged to have violated Department/Agency (D/A) acceptable use' policies and agreements for NSS. The alleged violation may be caused by the aggregation of triggers indicating anomalous activity on a National Security System (NSS). The violation thresholds are arrived at by trigger events that meet established thresholds of anomalous activity or the observed violation of 'acceptable use' policies.",
  "references": [
    "CNSSI 4009-2022 from CNSSD No. 504",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/focused-observation/"
}