Active form of security monitoring where an unexpected result generates an alarm. Note: The unexpected result generates an alarm because a positive control test was executed against a registered data set in which the correct result is very well-known, but the expected result was not returned or observed.
Sources:
CNSSI 4009-2022