# How can my project meet regulatory requirements for monitoring?

**URL:** <https://ask.cyberinfrastructure.org/t/how-can-my-project-meet-regulatory-requirements-for-monitoring/938>\
**Category:** ResearchSOC Cybersecurity\
**Created:** [June 10, 2019, 6:26pm UTC](https://ask.cyberinfrastructure.org/t/how-can-my-project-meet-regulatory-requirements-for-monitoring/938 "2019-06-10T18:26:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Toddwrites](https://ask.cyberinfrastructure.org/letter_avatar_proxy/v4/letter/t/a88e57/32.png) [@Toddwrites](https://ask.cyberinfrastructure.org/u/Toddwrites)\
**Post date:** [June 10, 2019, 6:26pm UTC](https://ask.cyberinfrastructure.org/t/how-can-my-project-meet-regulatory-requirements-for-monitoring/938/1 "2019-06-10T18:26:31Z")

</div>

I was just told that, because of some of the information we handle, my project is required to have network monitoring across our infrastructure. The requirement, unfortunately, isn’t any better defined than “24/7 network monitoring”. How can I try to meet this requirement without sapping the budget for actual science?

---

<div class="post-metadata">

**Author:** ![ctnumn](https://ask.cyberinfrastructure.org/user_avatar/ask.cyberinfrastructure.org/ctnumn/32/231_2.png) [@ctnumn](https://ask.cyberinfrastructure.org/u/ctnumn)\
**Post date:** [June 11, 2019, 3:38pm UTC](https://ask.cyberinfrastructure.org/t/how-can-my-project-meet-regulatory-requirements-for-monitoring/938/2 "2019-06-11T15:38:43Z")

</div>

I’d get some clarification on what they want to be monitored. If it is traffic flows and your system is on a network that has network firewalls, the organization may already be monitoring traffic flows. Some institutions have event log monitoring (Splunk, graylog, etc) that can provide additional insight and you can have notifications on certain patterns.

I would check with the institution’s networking office and see what they are doing for monitoring.

---

<div class="post-metadata">

**Author:** ![vsoch](https://ask.cyberinfrastructure.org/user_avatar/ask.cyberinfrastructure.org/vsoch/32/112_2.png) [@vsoch](https://ask.cyberinfrastructure.org/u/vsoch)\
**Post date:** [June 13, 2019, 12:03pm UTC](https://ask.cyberinfrastructure.org/t/how-can-my-project-meet-regulatory-requirements-for-monitoring/938/3 "2019-06-13T12:03:40Z")

</div>

From personal experience, a lot of cloud providers also provide easy ways to enable monitoring (or do it by default). If your institution doesn’t have resources, this could be another option.