ISO 27001 · A.8 Technological

A.8.16 Monitoring activities

Monitor networks, systems and applications for anomalous behaviour and act on potential incidents.

Mapped across 9 provisions

Equivalent and related requirements in other frameworks and regulations.

CIS Controls v8EquivalentOfficial mapping
Source: CIS Controls v8 / ISO/IEC 27001
8.1 Establish and maintain an audit log management process
Logging, monitoring & detection
DORAPartialCurated
Art. 10 Detection
Logging, monitoring & detection
GLBAEquivalentCurated
§314.4(c)(8) Monitoring and logging of authorized user activity
Logging, monitoring & detection
HIPAAEquivalentCurated
§164.312(b) Audit controls
Logging, monitoring & detection
NIST 800-171EquivalentCurated
3.3.1 Create and retain audit logs
Logging, monitoring & detection
NIST 800-53EquivalentCurated
AU-2 Event logging
Logging, monitoring & detection
NIST CSF 2.0EquivalentCurated
DE.CM-01 Networks and services monitored
Logging, monitoring & detection
PCI DSSEquivalentCurated
Req. 10 Log and monitor all access to system components and cardholder data
Logging, monitoring & detection
SOC 2EquivalentCurated
CC7.2 Security event monitoring
Logging, monitoring & detection