Intrusion detection should be implemented to suit the threats, the application, the design criteria and the regulations that apply, designed, installed and configured as unbroken concentric rings around the asset matching the delay and response elements. The organization should: set parameters and requirements for each site, building or property so operating objectives are met; define the assets, the environmental and atmospheric conditions around them, the PAP systems applied and how detection matches them; design layers from the outermost, giving the longest delay, inward; design for consistent probability of detection and confidence in detecting intrusion; integrate sensors with barriers, entry control, video, lighting and guard deployment to maximise delay to the target and minimise response time; set procedures to cut false alarms and allow corrective responses to alarm states; and build in contingencies against direct or remote defeat of the system.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.