I. Define the purpose of an internal monitoring domain, which is an informed awareness of the state of the organization’s networks, information systems, and information security defenses.

II. Review the core components that internal monitoring is composed of:
• Building and maintaining an inventory of network devices and channels, IT infrastructure and applications, and information security infrastructure elements
• Leading the IT governance process within the organization to integrate the inevitable changes found in all network, IT, and information security programs
• Monitoring of IT activity in real time using IDPS to detect and initiate responses to specific actions or trends of events that introduce risk to the organization’s assets
• Monitoring the internal state of the organization’s networks and systems