|
control enhancementSI-4(7)
Automated Response to Suspicious Events (SI-4(7))
Notify [organization-defined] of detected suspicious events; and Take the following actions upon detection: [organization-defined].
integritymalwareflaw-remediationmonitoringenhancement
Why These Connect
Enhances1
These enhancements add specific capabilities or refinements to the base control.
Organization-Defined Parameters(2)
Assignmentorganization-defined incident response personnel
Assignmentorganization-defined least-disruptive actions