MON-06.1 ยท Query Parameter Audits of Personal Data (PD)

Control Description

Mechanisms exist to provide and implement the capability for auditing the parameters of user query events for data sets containing Personal Data (PD).

Control Question
Assessment question for control validation

Does the organization provide and implement the capability for auditing the parameters of user query events for data sets containing Personal Data (PD)?

Control Weighting
3
Validation Cadence
Annual
NIST CSF Function
Detect
Supply Chain Risk Management (SCRM) Tiers
Applicable SCRM tier levels for this control
Tier 2 - Operational
Tier 3 - Tactical