Situational awareness for the function is monitored to support the identification of cybersecurity events
Context and Guidance: Information collected through situational awareness activities is reviewed and used to help identify cybersecurity events. This information could be collected from multiple sources, including across functions within the organisation and outside of the organisation.
Related Practices • Input From: Implementing SITUATION-3d and SITUATION-3f provides input that may be useful for implementing this practice. • Progression: This practice is part of a practice progression. Practice progressions are groups of related practices that represent increasingly complete or more advanced implementations of an activity. The practices in this progression include: RESPONSE-1a, RESPONSE-1b, RESPONSE-1c, RESPONSE-1f.