{"schema":"https://ver.cy/schemas/card/1.0.0","id":"vr.tr.monitoring","code":"thing-q2143522","url":"https://ver.cy/models/thing/q2143522/","name":"monitoring","alternateNames":["extended detection and response","endpoint detection and response","Open Extended Detection and Response","Native Extended Detection and Response","XDR platform","managed detection and response","wastewater surveillance","health monitoring","sleep tracking","intraoperative monitoring","monitoring in clinical trials","prescription monitoring program"],"kind":"thing","status":"published","version":"0.2.0-wave.4","language":"en","classifiers":{"family":"Thing Registry","category":"Activities and processes","entryKind":"thing","plane":"ACT","domain":["ACT.ACT"],"industry":[],"navPath":"","tags":[],"facets":{}},"whatItIs":"The systematic observation and recording of a system, process, environment or condition over time to detect changes, problems or compliance, in fields from environmental and health monitoring to IT operations and cybersecurity, where security monitoring products include endpoint detection and response, extended detection and response or XDR platforms in native and open forms, and managed detection and response services; monitoring differs from one-off inspection and from surveillance of individuals, which raises privacy and legal issues.","purpose":"Let an agent explain monitoring as a practice, relay methods and standards across environmental, health, IT and security domains from reference sources, describe the security monitoring categories the registry aliases name without evasion or attack detail, and distinguish monitoring from inspection, evaluation, auditing and surveillance of individuals.","scope":{"in":[],"out":[],"boundaries":[]},"distinguishingFeatures":["Continuous or periodic","Detects change","Many domains","Privacy considerations"],"structure":{"bundles":[{"id":"understand","name":"Understand","description":"What monitoring is.","layers":[{"id":"definition","name":"Definition","description":"Definition.","findings":[{"id":"definition-finding","name":"Definition","description":"Definition.","questions":[{"text":"What is monitoring, and how does it differ from inspection, evaluation, auditing and surveillance of individuals?","kind":"definition"},{"text":"Is the question about a domain, a product category, or how to evade monitoring, which the model does not help with?","kind":"boundary"}]}]},{"id":"security","name":"Security","description":"Security monitoring.","findings":[{"id":"security-finding","name":"Security","description":"Security.","questions":[{"text":"What are EDR, XDR, open and native XDR and MDR, at a general level?","kind":"definition"},{"text":"Which entry fits the specific category?","kind":"action"}]}]}]},{"id":"domains","name":"Domains","description":"Domains.","layers":[{"id":"environment","name":"Environment","description":"Environmental monitoring.","findings":[{"id":"environment-finding","name":"Environment","description":"Environment.","questions":[{"text":"How are air, water and ecosystems monitored?","kind":"provenance"},{"text":"Which references are standard?","kind":"provenance"}]}]},{"id":"it","name":"IT","description":"IT and operations.","findings":[{"id":"it-finding","name":"IT","description":"IT.","questions":[{"text":"How do organisations monitor systems and networks, at a general level?","kind":"provenance"},{"text":"Which sources are cited?","kind":"provenance"}]}]}]},{"id":"governance","name":"Governance","description":"Governance.","layers":[{"id":"standards","name":"Standards","description":"Standards.","findings":[{"id":"standards-finding","name":"Standards","description":"Standards.","questions":[{"text":"What do ISO and sector standards require for monitoring?","kind":"provenance"},{"text":"Which entry fits security operations center?","kind":"action"}]}]},{"id":"privacy","name":"Privacy","description":"Privacy.","findings":[{"id":"privacy-finding","name":"Privacy","description":"Privacy.","questions":[{"text":"What privacy limits apply to monitoring employees and users?","kind":"provenance"},{"text":"Which entry fits workplace surveillance?","kind":"action"}]}]}]},{"id":"context","name":"Context","description":"Evaluation and history.","layers":[{"id":"evaluation","name":"Evaluation","description":"Monitoring and evaluation.","findings":[{"id":"evaluation-finding","name":"Evaluation","description":"Evaluation.","questions":[{"text":"How is monitoring and evaluation used in development programmes?","kind":"provenance"},{"text":"Which entry fits monitoring and evaluation?","kind":"action"}]}]},{"id":"history","name":"History","description":"History.","findings":[{"id":"history-finding","name":"History","description":"History.","questions":[{"text":"How did security monitoring evolve from antivirus to XDR?","kind":"provenance"},{"text":"Which entry fits antivirus software?","kind":"action"}]}]}]}]},"agentConduct":{"may":["Monitor systems, processes and environments the agent is authorized to watch, and report changes.","Tune alerts so that real problems are not lost in noise."],"mustNot":["Monitor people beyond what they have been told and the law permits.","Help evade security monitoring or detection.","Disable or hide alerts without authorization.","Repurpose monitoring data for unrelated uses such as profiling staff."],"requiresHuman":["Extending monitoring to employees, users or the public.","Acting on monitoring data in decisions about people."]},"ethics":{"considerations":["Monitoring protects systems and health, but over-monitoring violates privacy.","Alert fatigue lets real failures slip past the people responsible."],"affectedParties":["People being monitored","Operators","Users of the systems"]},"owners":{"steward":"The operator of the monitored system.","roles":[],"masterSystems":[]},"relations":[{"target":"Q193181","type":"parent","note":"registry parent class"},{"target":"observation","type":"related","note":"in registry terms"},{"target":"endpoint detection and response","type":"related"},{"target":"surveillance","type":"related","note":"of individuals"},{"target":"incident response","type":"related"}],"interaction":{"identity":{"applicability":"required","items":["Vercy registry: vr.tr.monitoring","Wikidata: Q2143522 (https://www.wikidata.org/wiki/Q2143522)"]},"properties":{"applicability":"not-applicable","items":["EDR term coined: 2013 year - Gartner","XDR concept: about 2018 note","monitoring cycle: collect, analyse, alert, respond list"]},"recognition":{"applicability":"optional","items":["Ongoing observation and recording","EDR, XDR platforms, open and native XDR, managed detection and response","Inspection is one-off; evaluation judges results; auditing checks compliance; surveillance of individuals targets people","Not a visible object; sensors, dashboards and logs."]},"capabilities":{"applicability":"required","items":["explain the practice","relay domains and standards","describe security monitoring categories","distinguish related practices"]},"hazards":{"applicability":"required","items":["Alert fatigue","Privacy violations from over-monitoring","Agents giving detection evasion detail"]},"interfaces":{"applicability":"required","items":["ISO/IEC 27001 monitoring controls","Environmental monitoring regulations","Privacy laws on employee and personal monitoring"]},"context":{"applicability":"required","items":["Detecting change, problems and threats over time.","environmental monitoring","health and patient monitoring","infrastructure and IT monitoring","security monitoring including EDR, XDR and MDR","programme monitoring and evaluation"]}},"sources":[{"title":"Wikidata item Q2143522: monitoring","url":"https://www.wikidata.org/wiki/Q2143522","note":"identity and sense of the item"},{"title":"Wikipedia: Monitoring","url":"https://en.wikipedia.org/wiki/Monitoring","note":"general description of the item"}],"openQuestions":["Should XDR and EDR be separate primary entries?","How should security and environmental sources be linked?","The registry entry has merged aliases naming security product categories; should they be split off?"],"resources":{"spec":"/models/things/publications/thing-q2143522/spec.json"},"provenance":{"origin":"thing registry research (pass 2)","builtFrom":["models/things/publications/thing-q2143522/spec.json"],"providers":["Claude"],"researchStatus":"unreviewed","generatedAt":"2026-09-13T19:00:32Z","builder":"tools/build_cards.py@1.0.0"},"completeness":{"sections":{"classifiers":"filled","whatItIs":"filled","purpose":"filled","distinguishingFeatures":"filled","structure":"filled","agentConduct":"filled","ethics":"filled","owners":"filled","relations":"filled","interaction.identity":"filled","interaction.properties":"not-applicable","interaction.recognition":"filled","interaction.capabilities":"filled","interaction.hazards":"filled","interaction.interfaces":"filled","interaction.context":"filled","sources":"filled"},"notes":{"_gate":"Published through the thing publication gate 1.0 on 2026-10-06T19:51:57+00:00: completeness 1.00; sense: Wikidata description; 2 live sources; review by codex: pass","interaction.properties":"Plane ACT: no invented physical properties."},"score":1.0}}