Recognises a monitoring rule with no threshold or response
https://knobit.org/id/knobit/S-506
Also as Turtle · JSON-LD · RDF/XML · AI benchmark on Skilirium
| Context functions | Result evaluation |
|---|---|
| Knobit creation methods | AI generated |
| Knobit types | Skill |
| LCG purposes | Assessing the learner's knowledge or skill state |
| LCG purposes | Selecting an assessment task or learning activity |
| action verb | Recognises en |
| applies knowledge | Explains logging and monitoring of data access |
| assessment criterion | Flags the deficient case and passes the acceptable one. Deficient: MR-002 "bulk reads of customer data", `threshold: null`, `response: null` Acceptable: > 10 000 rows in an hour -> SOC ticket within 1 hour en |
| assessment method | skill-tests task: Cardholder data environment logging and access review (dsec-monitoring-audit) en |
| conforms to profile | https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1 |
| dcterms:identifier | S-506 |
| dcterms:license | https://creativecommons.org/licenses/by/4.0/ |
| dcterms:source | Review checklist 05-monitoring-audit, row 6 (27002 8.16; DORA) en |
| expected result | The rule and its threshold and responder en |
| owl:sameAs | https://bitbucket.org/reffa/ontology/id/knobit/data-security/05-monitoring-audit/06 |
| rdfs:label | Recognises a monitoring rule with no threshold or response en |
| schema:creativeWorkStatus | accepted |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| skos:altLabel | Monitoring rule with no threshold or response en |
| skos:definition | An event watched with no trigger or no action. en |
| skos:prefLabel | Recognises a monitoring rule with no threshold or response en |
| target object | watched event without trigger or action en |
Used by
| includes knobit | Monitors access with logs its subjects cannot alter and recertifications its holders do not sign |
|---|---|
| requires knobit | Monitor and audit access |