Citation Audit

Citation: Continuously improve and evolve due to changes in threat landscape, mission, technology, and regulations ¶ 2 – In addition, the ZTA may need to adapt to a changing threat landscape. As new types of adversary attacks become known and prevalent, the ZTA will need to add the threat signatures for these attacks to the list of things it monitors for. Ideally the ZTA will also perform behavior-based monitoring that enables it to detect anomalies that may signal zero-day attacks for which threat signatures are not yet know. Behavior-based monitoring tools provide the ZTA with some degree of agility and readiness with respect to its ability to detect attacks by adversaries who are constantly changing their tactics and techniques. In any case, as the threat landscape changes, the organization's CISO and security team need to continually assess the ZTA's topology, components, and policies to ensure that they are best designed to address newly emerging threats. If the value of one or more of an organization's resources increases substantially, the organization may want to change how that resource is protected by the ZTA, as well as what its access policies are.

Control: CC ID 585 – Monitor systems for inappropriate usage and other security violations.