Monitor the system to detect attacks and indicators of attack through intrusion detection and prevention, malicious code protection, vulnerability scanning, audit record, network and firewall monitoring, and to detect unauthorised local, network and remote connections; identify unauthorised use through event logging; place monitoring capabilities strategically and at ad hoc locations; analyse detected events and anomalies; adjust monitoring when risk changes; obtain a legal opinion on monitoring; and provide the intrusion detection, malicious code, scanning, audit, network and firewall monitoring logs to the information security personnel weekly.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.