Control domain
Logging, monitoring & detection
Recording activity and monitoring systems and networks to detect anomalous or malicious behaviour.
12 requirements across 10frameworks & regulations.
- ISO 27001EquivalentA.8.16 Monitoring activities
- ISO 27001EquivalentA.8.15 Logging
- NIST CSF 2.0EquivalentDE.CM-01 Networks and services monitored
- NIST CSF 2.0EquivalentPR.PS-04 Log records generated for monitoring
- CIS Controls v8Equivalent8.1 Establish and maintain an audit log management process
- SOC 2EquivalentCC7.2 Security event monitoring
- NIST 800-53EquivalentAU-2 Event logging
- NIST 800-171Equivalent3.3.1 Create and retain audit logs
- HIPAAEquivalent§164.312(b) Audit controls
- DORAPartialArt. 10 Detection