SI-4 - System Monitoring

SI-4 requires the organization to establish and maintain mechanisms to monitor the information system to detect, log, and respond to security-relevant events. It includes continuous monitoring of system components, analysis of audit records, and timely notification of identified anomalies or incidents to support effective incident response and ongoing risk management.