Frameworks / ASD Strategies to Mitigate Cyber Security Incidents / ASD37-29 ASD Strategies to Mitigate Cyber Security Incidents
Detecting Cyber Security Incidents and Responding
ASD Strategies to Mitigate Cyber Security Incidents ASD37-29: Host-based IDS/IPS (Very Good) Host-based intrusion detection/prevention system to identify anomalous behaviour and known malicious activity.
Maintained by Gerard Blokdyk · Verified against the published standard 31 May 2026 · Control text last updated 21 May 2026 What else in your programme already covers this This control maps to 89 controls across 56 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
CA-8 Penetration Testing IR-4 Incident Handling SI-4 System Monitoring SI-4(23) System Monitoring | Host-based Devices (SI-4(23)) CA-8 Penetration Testing IR-4 Incident Handling SI-4 System Monitoring SI-4(23) System Monitoring | Host-based Devices (SI-4(23)) ASBv3-LT-1 Enable threat detection capabilities ASBv3-PV-4 Audit and enforce secure configurations for compute resources ES-1 Use Endpoint Detection and Response (EDR) CIS-13.2 Deploy a Host-Based Intrusion Detection Solution CIS-13.7 Deploy a Host-Based Intrusion Prevention Solution 8.1 User endpoint devices 8.16 Monitoring activities NIST-CSF-DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events NIST-CSF-PR.PS-04 Log records are generated and made available for continuous monitoring 11.5.1 11.5.1 IDS/IPS monitoring of CDE traffic 11.5.2 11.5.2 Change detection on critical files API1164-13 Business Continuity and Recovery AT-DSG-6 Sections 12-13 - Image processing (video surveillance/CCTV) BSI-17 Continuous monitoring strategy C5-OPS-05 Protection Against Malware - Implementation CAT-D3-2 Detective controls FISMA-3554-Agency-Responsibilities Federal Agency Responsibilities (44 USC 3554) - CIO + CISO + Program + Reporting FTC-Safeguards-ServiceProvider-Evaluation Service Provider Oversight + Program Evaluation + Personnel Training (16 CFR 314.4(d-g)) FedRAMP-ConMon Continuous Monitoring (ConMon) and Significant Change Requests FDBR-Enforcement-AG-CurePeriod Enforcement by Florida Department of Legal Affairs + Penalties + 45-Day Cure (Fla. Stat. 501.72, 501.721, 501.722) GhCSA-Implementation-Roadmap Implementation Roadmap - Organizational Roles, Tooling and Metrics HKMA-CRAF-Domain3-4-Protection-Detection HKMA C-RAF Domain 3 (Protection) + Domain 4 (Detection) - Access, Data, Infrastructure, Application, Monitoring, Testing, Threat Intel ICP-24 Macroprudential Surveillance and Insurance Supervision IEC62443-13 Network security monitoring IEEE1686-Section5.2-5.3-AuditLog-Retention-Export-Monitoring IEEE 1686 Section 5.2 + 5.3 - Audit Trail Records + Retention + Export + Supervisory Monitoring and Control + Network Security Monitoring IMO-MSC-FAL-Detect-AnomalyDetection-OT-IT-Monitoring-Reporting-BridgeAlarms IMO MSC-FAL Detect Function - Anomaly Detection + OT and IT System Monitoring + Bridge Alarms + Log Aggregation + Incident Reporting Channels + Crew Observation 8.16 Monitoring activities ISO28001-PS-01 Facility Security 27006-9.4 Surveillance and recertification ISO27019-13 Network security monitoring 27400-6.5 Security monitoring and incident response JP-FSA-CYB-Security-Monitoring-SOC-Operations-SIEM-EDR-MDR-XDR-24x7-Detection-Alert-Triage Japan FSA Cybersecurity Security Monitoring + SOC 24x7 Operations + SIEM + EDR + MDR + XDR + Detection + Alert Triage + Threat Hunting + Incident Response Integration + Threat Intelligence Integration + UEBA MTCS-Logging-Monitoring-Compliance-Audit-SLA-Configuration-SIEM-SOAR-Cloud-Monitoring-CSPM MTCS Logging + Monitoring + Compliance + Audit + SLA + Configuration + SIEM + SOAR + CSPM NERCCIP-5 System Security Management + Configuration Change Management and Vulnerability Assessments (CIP-007 + CIP-010) NISTSP144-8 Monitoring, Incident Response, Exit Strategy, and Compliance NISTSP145-8 Governance, Reporting, and Stakeholder Education on Cloud Definition NISTSP82-6 OT Audit, Monitoring, Anomaly Detection, and OT-Specific SOC NZISM-5 Network Security, System Hardening, and Application Security DSOMM-5 Information Gathering, Logging, Monitoring, and Incident Response OMANCS-6 Security Monitoring, Detection, Incident Response, and OmanCERT Notification SOC2-CC7.2 CC7.2 Monitoring system components for anomalies IM8-SEC.3 Network Security ISMSP-SYS-03 Security Monitoring and Log Management TEFCAREC-1 Common Agreement Conformance and Onboarding TSAPIPE-2 OT/IT Network Segmentation and Access Control UK-TSA-MON-01 Security Monitoring US-SEC-DA-SC-03 ETF Framework Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected .
Other controls in Detecting Cyber Security Incidents and Responding You are reading one control. How much of ASD Strategies to Mitigate Cyber Security Incidents have you already done? ASD Strategies to Mitigate Cyber Security Incidents ASD37-29 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ASD Strategies to Mitigate Cyber Security Incidents your existing evidence covers. Hold NIST SP 800-53 Rev 5 and 32 of 37 ASD Strategies to Mitigate Cyber Security Incidents controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the NIST SP 800-53 Rev 5 pair alone.
Query this from an agent The graph holds this control, the 89 it maps to, and the evidence behind each claim, over MCP and REST.