monitoring Controls

Security logs are collected centrally and retained for investigation

Network and system anomalies are monitored and alerted on

Monitor, control, and protect communications at network boundaries

Implement hardware, software, and procedural mechanisms that record and examine activity in systems containing ePHI

Networks and network services are monitored to detect adverse events

Monitoring for unauthorized personnel, connections, devices, and software is performed

Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events

Log records are generated and made available for continuous monitoring

Capacity is managed to ensure system availability

Relevant security information is obtained and used

Security controls are evaluated on an ongoing basis

Control deficiencies are identified, evaluated, and communicated

Anomalies and security events are detected and monitored