Monitoring Policy
What is Monitoring Policy?
A documented policy defining what activities and systems are monitored, how monitoring data is used, and retention requirements.
Frameworks that govern monitoring policy
What the standards actually require on monitoring policy
Requirements naming monitoring policy across 6 standards, quoted from the control text.
An employer that employs 25 or more employees on 1 January of any year must, before 1 March of that year, ensure it has a written policy in place, covering all of its employees, on the electronic monitoring of employees.
ontario-employment-standards-act-2000-part-xi-1-written-policy-on-electronic-monitoring::41.1.1(1) · 41.1.1(1) Have a written electronic monitoring policy in place for all employees →The organisation develops, documents and disseminates to defined personnel or roles a assessment, authorization, and monitoring policy at the selected organisation, business process and, or, system level that addresses purpose, scope, roles, responsibilities,...
canada-itsp-10-033-security-and-privacy-controls-and-assurance-activities-catalogue::CA-01 · CA-01 Assessment, authorization and monitoring policy and procedures →Keep approved logging and monitoring policies and procedures, and review them at least annually.
CCM-LOG-01 · Logging and Monitoring Policy and Procedures →Keep approved, communicated and applied logging and monitoring policies and procedures, and keep them reviewed every year and again whenever a significant change occurs.
cloud-security-alliance-cloud-controls-matrix-ccm-v4-1::LOG-01 · Logging and Monitoring Policy and Procedures →In some countries a monitoring policy legally needs the approval of a works council or similar employee body. Because IT staff, whose focus is security, usually write such policies, the Working Party recommends in every case that a representative sample of emp...
article-29-working-party-opinion-2-2017-on-data-processing-at-work-wp249::5.3(e) · 5.3(e) Involve a representative sample of employees, and the works council where the law requires it →Develop, document and disseminate to the responsible personnel an assessment, authorization and monitoring policy and its implementing procedures; designate personnel with information security responsibilities to manage them;
fbi-cjis-security-policy::CA-1 · CA-1 Policy and Procedures →Questions people ask about monitoring policy
What is Monitoring Policy?
Why is Monitoring Policy important for compliance?
Which compliance frameworks address Monitoring Policy?
Where can I learn more about Monitoring Policy?
See how Monitoring Policy applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.