I think this is one of the controls where OSD's team input would be much appreciated. Off-hand, kube audit logs and Linux audit logs would cover a lot, but the control also asks for network monitoring which I'm unsure how to achieve.

Acceptance criteria:

• there is an opencontrol reply for SI-4(23)
• there is a CaC rule or existing rules are tagged with SI-4(23)