Alerts and alarms are not configured to include security events
Context and Guidance: Performance-only monitoring of assets (such as networks, systems, and applications) may not provide the function with the visibility needed to detect and respond to a cybersecurity incident.
Alerts and alarms that are configured for performance-only reasons are limited in scope, and should be enhanced by integrating security monitoring statistics.