← ISO 27001 Annex A in plain English

A.8.16 A.8

Technological / A.8.16

Monitoring for activity that should not be there

Think of it likeNoticing the pantry light is on at three in the morning.

In plain English

The family watches for activity that does not fit the normal pattern, since the record is only useful if somebody reads it.

Related CSF and CIS controls (unofficial mapping)