# MON-10 Monitoring effectiveness review

Domain: MON Continuous Monitoring & Human Oversight · HI-AAF v1.3 · Public review · https://humanintel.net/standard/mon/mon-10

Monitoring effectiveness is reviewed at least quarterly: false-positive rates, missed incidents, mean time to detect, and mean time to remediate.

The monitoring system itself is reviewed at a documented cadence, at least quarterly, for effectiveness. The review covers false-positive rates, missed incidents, mean time to detect, and mean time to remediate. This meta-monitoring ensures that the monitoring controls are not just present but are actually working and improving over time.

## Maturity

- L1 Ad hoc: Controls exist informally; documentation is incomplete; no consistent review.
- L2 Documented: Controls are written down; ownership is assigned; review cadence is defined.
- L3 Operated: Controls are followed in practice; evidence is collected; deviations are tracked. Published criterion for MON-10: Effectiveness review has been conducted within the documented cadence; metrics (false-positive rate, MTTD, MTTR) are tracked; findings from the review have resulted in tuning or improvement actions.
- L4 Measured: Control effectiveness is measured against documented thresholds; trends are reported.
- L5 Continuously Improved: Controls evolve based on incident learning; maturity gains are evidenced over time.

## Evidence an assessor asks for

- Effectiveness review has been conducted within the documented cadence.
- Metrics (false-positive rate, MTTD, MTTR) are tracked.
- Findings from the review have resulted in tuning or improvement actions.

## Framework mappings

- NIST AI RMF: MANAGE 2.4
- SOC 2 (TSC): CC7.3
- EU AI Act: Art. 14(4)
- Singapore: MAIGF Incident Reporting, AI Verify Human Agency & Oversight

Mappings are directional: meeting this control evidences but does not by itself satisfy the external requirement.

## Cite this control

Human Intelligence. HI-AAF v1.3, MON-10 Monitoring effectiveness review. Public review edition, July 2026. https://humanintel.net/standard/mon/mon-10