Unauthorised viewers may get access to PII if it is incorrectly collected by monitoring systems through metrics or tracing.
Capture Personal Identifiable Information
CCC.Monitor.TH01
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.Monitor.CP01 | Metric collection | Gathering numerical (quantitative) data points about the performance, health, or behaviour of systems, applications or infrastructure. |
| CCC.Monitor.CP02 | Tracing | An observability technique providing an end-to-end view of a request or transaction flow through a complex system to enable a single action to be linked to resulting events in multiple downstream systems. |
| CCC.Monitor.CP08 | Application Performance Monitoring (APM) | A comprehensive approach to monitoring the performance, availability and user experience of an application through multiple levels of data collection |
| CCC.Monitor.CP09 | Dashboard | A visual representation of the health of systems being monitored. Pulling together metrics, current alerts, SLO/SLI's, health checks and other monitoring features into a single location to enable a view of the health of the overall system. |
| CCC.Monitor.CP11 | Integration with Third-Party Tools | Monitoring tools are able to integrate with a number of downstream systems in order to send notifications and alerts, raise tickets and create incident reports. |
External Mappings
| Framework | ID | Relationship | Remarks |
|---|---|---|---|
| MITRE-ATT&CK | T1589 | relates-to |