Information system monitoring information will be provided to GSA S/SO as needed and/or on an established schedule, dependent on the criticality of the data. In the event of an event or incident, information will be provided as it is available. Scheduled reports will be provided daily for events such as after-hours administrative logins, users being added to privileged groups, persistent malware detections, etc.