NIST SP 800-66 Rev 2 164.308(a)(1)(ii)(D): Information System Activity Review (Required)

Regularly review audit logs, access reports, and security incident tracking reports. NIST recommends defined review frequency, SIEM integration, anomaly detection, and documented review evidence.

Other controls in Administrative

164.308(a)(1)(i) Security Management Process (Standard)
164.308(a)(1)(ii)(A) Risk Analysis (Required)
164.308(a)(1)(ii)(B) Risk Management (Required)
164.308(a)(1)(ii)(C) Sanction Policy (Required)
164.308(a)(2) Assigned Security Responsibility (Standard)
164.308(a)(3)(i) Workforce Security (Standard)
164.308(a)(3)(ii)(A) Authorization and Supervision (Addressable)
164.308(a)(3)(ii)(B) Workforce Clearance Procedure (Addressable)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-66 Rev 2 controls