An OSCAL Control
Track incidents and collect and analyze incident information using organization-defined automated mechanisms .
Automated mechanisms for tracking incidents and collecting and analyzing incident information include Computer Incident Response Centers or other electronic databases of incidents and network monitoring devices.
incidents are tracked using automated mechanisms ;
incident information is collected using automated mechanisms ;
incident information is analyzed using automated mechanisms .
Incident response policy
procedures addressing incident monitoring
incident response records and documentation
system security plan
incident response plan
other relevant documents or records
Organizational personnel with incident monitoring responsibilities
organizational personnel with information security responsibilities
Incident monitoring capability for the organization
automated mechanisms supporting and/or implementing the tracking and documenting of system security incidents