BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

AU-13 Monitoring for Information Disclosure

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged AU

Title

Monitoring for Information Disclosure

Control

a. Monitor [Assignment: open-source information and/or information sites] [Assignment: frequency] for evidence of unauthorized disclosure of organizational information; and
b. If an information disclosure is discovered:
1. Notify [Assignment: personnel or roles] ; and
2. Take the following additional actions: [Assignment: additional actions].

Discussion

Unauthorized disclosure of information is a form of data leakage. Open-source information includes social networking sites and code-sharing platforms and repositories. Examples of organizational information include personally identifiable information retained by the organization or proprietary information generated by the organization.

Parameters

au-13_odp.01: open-source information and/or information sites
au-13_odp.02: frequency
au-13_odp.03: personnel or roles
au-13_odp.04: additional actions

Related controls

ac-22, pe-3, pm-12, ra-5, sc-7, si-20

STIG rules that implement this control 0

No followed STIG rule cites a CCI indexed to this control (CCI list 2026-07-14).