Control: The organisation monitors [Assignment: organisation-defined open source information and/or information sites] [Assignment: organisation-defined frequency] for evidence of unauthorised disclosure of organisational information.
Monitoring for Information Disclosure Control Enhancements:
AU-13 (1) Monitoring for Information Disclosure - Use of automated tools
The organisation employs automated mechanisms to determine if organisational information has been disclosed in an unauthorised manner.
Supplemental Guidance: Automated mechanisms can include, for example, automated scripts to monitor new posts on selected websites, and commercial services providing notifications and alerts to organisations.
AU-13 (2) Monitoring for Information Disclosure - Review of monitored sites
The organisation reviews the open source information sites being monitored [Assignment: organisation-defined frequency].