File Integrity Monitoring (FIM)

A control that records a trusted baseline of files and configuration, then detects any later change from it. Its value depends on storing the baseline and evidence somewhere the monitored system cannot silently alter, so findings remain trustworthy even if that system is compromised.