View source for DS3.5:

'''DS 3.5 Monitoring and Reporting '''<br>
<br>
'''Control Objective:'''<br>
<br>
Continuously monitor the performance and capacity of IT resources. Data gathered serve two purposes: 1.) To maintain and tune current performance within IT and address such issues as resilience, contingency, current and projected workloads, storage plans and resource acquisition; and 2.) To report delivered service availability to the business as required by the SLA. Accompany all exception reports with recommendations for corrective action.
<br><br>
'''Applicability:'''<br>
<br>
:: '''Sarbanes-Oxley'''
:: HIPAA
:: GLBA
:: PCI
:: FISMA
:: NIST SP 800-66
:: Ditscap
:: Control Exception
:: User Defined
<br>
'''Risk Association Control Activities:'''<br>
<br>
::'''1.	Risk: Security incidents and incompliance with information security procedures may go overlooked and not addressed.'''

:::a.	SOX.3.1.1: Management should monitor security incidents and the extent of compliance with information security procedures.

<br>
'''Implementation Guide:'''<br>
<br>
'''Process Narrative'''<br>
Insert a description of the process narration that is applicable to the existing control statement this narrative refers to.<br>
<br>
'''Process Illustration'''<br>
Insert a process diagram, flowchart or other visual representation here to illustrate the process narrative.<br>
<br>
[[Image:someimage.jpg]]<br>
<br> 
'''Control Commentary'''<br>
Insert a description of the control that is applicable to the existing control statement this commentary refers to.<br>
<br>
'''Control Exception Commentary'''<br>
Insert a description of the control exception that is applicable to the existing control statement this commentary refers to.<br>
<br>
'''Evidence Archive Location'''<br>
Insert Evidence Description Here.<br> 
<br>
'''Control Status and Auditors Commentary'''<br>
Describe the condition of the applicable control and its effectiveness. Set the color icon to a redlock.jpg, yellowlock.jpg or greenlock.jpg.<br>
<br>
[[Image:redlock.jpg]]<br>
<br>
'''Remediation Plan'''<br>
Insert remediation plan, applicability, or any information that indicates what needs to be done.<br>
<br>
'''Supplemental Information:'''<br>
ITIL Service Delivery, Availability Management <br>
ITIL 8.7 Availability measurement and reporting Service Delivery<br>
ITIL Capacity Management<br>
ITIL 6.3.1 Monitoring<br>
<br>
ISO 6.3 Responding to security incidents and malfunctions <br>
ISO 8.2 System planning and acceptance <br>
ISO 8.4 Housekeeping <br>
ISO 9.7 Monitoring system access and use <br>