Control: ism-1609; Revision: 2; Updated: Dec-21; Applicability: ALL; Essential Eight: N/A ​

System owners are consulted before allowing intrusion activity to continue on a system for the purpose of collecting further data or evidence.