What type of Intrusion Detection System (IDS) monitoring is required if response by local on-site personnel or security is satisfactory?

• A. Remote monitoring
• B. Local monitoring
• C. Central monitoring
• D. No monitoring

Answer: (B)

Local monitoring is used when security staff on the premises can observe IDS alerts and act quickly. If on-site personnel can handle responses satisfactorily, this approach lets the team verify incidents, coordinate with building controls, and contain or mitigate threats without waiting for an external center. Relying on a remote or central monitoring setup would add latency and rely on someone else to interpret alerts, which isn’t needed when the on-site team can manage effectively. Not monitoring at all isn’t acceptable because it leaves you blind to intrusions, whereas local monitoring provides immediate awareness and action aligned with the on-site capabilities.