NIST 800-171 · System and Information Integrity
Requirement 3.14.6
- SPRS weight
- SPRS weight: 5
- POA&M eligibility
- Not POA&M-eligible
- Assessment objectives
- 3 assessment objectives
Official requirement text
Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks.
Assessment objectives
Assessors don’t evaluate the requirement as one sentence; they walk these objectives one by one. Each must be met for the requirement to score.
- 3.14.6[a]the system is monitored to detect attacks and indicators of potential attacks.
- 3.14.6[b]inbound communications traffic is monitored to detect attacks and indicators of potential attacks.
- 3.14.6[c]outbound communications traffic is monitored to detect attacks and indicators of potential attacks.
Inside Valontir, this requirement carries a full plain-English guide: what it asks in normal words, what good looks like in a small shop, the evidence an assessor accepts, the common gaps that cost points, and a plain reading of every assessment objective shown above. See it in a demo.