BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

SI-04(04) Inbound and Outbound Communications Traffic

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged SI Moderate baselineHigh baseline part of SI-4

Title

Inbound and Outbound Communications Traffic

Control

(a) Determine criteria for unusual or unauthorized activities or conditions for inbound and outbound communications traffic;
(b) Monitor inbound and outbound communications traffic [Assignment: organization-defined frequency] for [Assignment: organization-defined unusual or unauthorized activities or conditions].

Discussion

Unusual or unauthorized activities or conditions related to system inbound and outbound communications traffic includes internal traffic that indicates the presence of malicious code or unauthorized use of legitimate code or credentials within organizational systems or propagating among system components, signaling to external systems, and the unauthorized exporting of information. Evidence of malicious code or unauthorized use of legitimate code or credentials is used to identify potentially compromised systems or system components.

Parameters

si-4.4_prm_1: organization-defined frequency
si-4.4_prm_2: organization-defined unusual or unauthorized activities or conditions
si-04.04_odp.01: frequency
si-04.04_odp.02: unusual or unauthorized activities or conditions
si-04.04_odp.03: frequency
si-04.04_odp.04: unusual or unauthorized activities or conditions

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).