Canada ITSP.10.033 Security and Privacy Controls and Assurance Activities Catalogue AU-13: AU-13 Monitoring for information disclosure

The organisation monitors defined open-source information and sites at a set frequency for evidence of unauthorized disclosure of its information and, when disclosure is found, notifies defined roles and takes defined actions. The GC discussion notes that such monitoring may collect personal information and needs lawful authority, with identifiers redacted where possible. 3 enhancements.