03.13.07 —

What this control requires

Source: NIST SP 800-171 R3 §03.13.07 (official control text).

Why this matters

System and communication protection controls require continuous monitoring to detect security incidents, configuration drift, and policy violations in real time. Without active monitoring, organizations remain blind to unauthorized access attempts, malware activity, failed security controls, and compliance gaps until damage occurs. This control ensures security tools generate alerts when protective mechanisms fail or detect threats, enabling rapid response before attackers establish persistence or exfiltrate data. Monitoring transforms static defenses into an active security posture that adapts to emerging threats.

What evidence assessors expect

Assessors typically look for: screenshot, PDF, configuration export. FORCE coaches you through the exact implementation steps and captures each artifact in-platform.

Related controls