end-06-endpointfileintegritymonitoringfim.md

SCF - END-06 - Endpoint File Integrity Monitoring (FIM)

Mechanisms exist to utilize File Integrity Monitor (FIM) technology to detect and report unauthorized changes to system files and configurations.

Mapped framework controls

NIST 800-53

• SI-7

SOC 2

• CC6.8

Control questions

Does the organization utilize File Integrity Monitor (FIM) technology to detect and report unauthorized changes to system files and configurations?