SI-05 Security Alerts And Advisories
System and Information Integrity
Description
The organization receives information system security alerts/advisories on a regular basis, issues alerts/advisories to appropriate personnel, and takes appropriate actions in response.
Supplemental Guidance
The organization documents the types of actions to be taken in response to security alerts/advisories. The organization also maintains contact with special interest groups (e.g., information security forums) that: (i) facilitate sharing of security-related information (e.g., threats, vulnerabilities, and latest security technologies); (ii) provide access to advice from security professionals; and (iii) improve knowledge of security best practices. NIST Special Publication 800-40 provides guidance on monitoring and distributing security alerts and advisories.
Enhancements
(1) The organization employs automated mechanisms to make security alert and advisory information available throughout the organization as needed.
MITRE ATT&CK Techniques (4)
ATT&CK v16.1Techniques mitigated by this control, mapped via CTID.