Requirement
"Networks, systems and applications shall be monitored for anomalous behaviour and appropriate actions taken to evaluate potential information security incidents."[1]
Explanation
Monitor system alerts and review audit logs to identify security incidents. Alerts are often generated by anti-malware software firewalls network intrusion detection systems and cloud services such as Microsoft 365.
