( )contributes to monitoring and data collection by defining security monitoring and data collection requirements.