Frameworks / ASD Strategies to Mitigate Cyber Security Incidents / ASD37-32 ASD Strategies to Mitigate Cyber Security Incidents
Detecting Cyber Security Incidents and Responding
ASD Strategies to Mitigate Cyber Security Incidents ASD37-32: Network-based IDS/IPS (Limited) Network-based intrusion detection/prevention system using signatures and heuristics to identify anomalous traffic.
Maintained by Gerard Blokdyk · Verified against the published standard 31 May 2026 · Control text last updated 21 May 2026 What else in your programme already covers this This control maps to 94 controls across 55 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
CA-8 Penetration Testing IR-4 Incident Handling SC-7 Boundary Protection SI-4 System Monitoring SI-4(1) System Monitoring | System-wide Intrusion Detection System (SI-4(1)) SI-4(4) Inbound and Outbound Communications Traffic CA-8 Penetration Testing IR-4 Incident Handling SC-7 Boundary Protection SI-4 System Monitoring SI-4(1) System Monitoring | System-wide Intrusion Detection System (SI-4(1)) SI-4(4) Inbound and Outbound Communications Traffic 11.5.1 11.5.1 IDS/IPS monitoring of CDE traffic 11.5.1.1 11.5.1.1 Service providers detect covert malware channels 12.10.5 12.10.5 Plan covers alerts from security monitoring systems ASBv3-LT-1 Enable threat detection capabilities ASBv3-NS-4 Deploy intrusion detection/intrusion prevention systems (IDS/IPS) C5-COS-01 Technical safeguards C5-COS-03 Monitoring of connections in the Cloud Service Provider's network CIS-13.3 Deploy a Network Intrusion Detection Solution CIS-13.8 Deploy a Network Intrusion Prevention Solution 8.16 Monitoring activities 8.20 Networks security 8.16 Monitoring activities 8.20 Networks security NIST-CSF-DE.CM-01 Networks and network services are monitored to find potentially adverse events NIST-CSF-PR.PS-04 Log records are generated and made available for continuous monitoring SOC2-CC6.6 CC6.6 Protection against threats from outside the system boundary SOC2-CC7.2 CC7.2 Monitoring system components for anomalies API1164-13 Business Continuity and Recovery AT-DSG-6 Sections 12-13 - Image processing (video surveillance/CCTV) BSI-17 Continuous monitoring strategy CAT-D3-2 Detective controls FISMA-3554-Agency-Responsibilities Federal Agency Responsibilities (44 USC 3554) - CIO + CISO + Program + Reporting FTC-Safeguards-ServiceProvider-Evaluation Service Provider Oversight + Program Evaluation + Personnel Training (16 CFR 314.4(d-g)) FedRAMP-ConMon Continuous Monitoring (ConMon) and Significant Change Requests FDBR-Enforcement-AG-CurePeriod Enforcement by Florida Department of Legal Affairs + Penalties + 45-Day Cure (Fla. Stat. 501.72, 501.721, 501.722) GhCSA-Implementation-Roadmap Implementation Roadmap - Organizational Roles, Tooling and Metrics HKMA-CRAF-Domain3-4-Protection-Detection HKMA C-RAF Domain 3 (Protection) + Domain 4 (Detection) - Access, Data, Infrastructure, Application, Monitoring, Testing, Threat Intel ICP-24 Macroprudential Surveillance and Insurance Supervision IEC62443-13 Network security monitoring IEEE1686-Section5.2-5.3-AuditLog-Retention-Export-Monitoring IEEE 1686 Section 5.2 + 5.3 - Audit Trail Records + Retention + Export + Supervisory Monitoring and Control + Network Security Monitoring IMO-MSC-FAL-Detect-AnomalyDetection-OT-IT-Monitoring-Reporting-BridgeAlarms IMO MSC-FAL Detect Function - Anomaly Detection + OT and IT System Monitoring + Bridge Alarms + Log Aggregation + Incident Reporting Channels + Crew Observation ISO28001-PS-01 Facility Security 27006-9.4 Surveillance and recertification ISO27019-13 Network security monitoring 27400-6.5 Security monitoring and incident response JP-FSA-CYB-Security-Monitoring-SOC-Operations-SIEM-EDR-MDR-XDR-24x7-Detection-Alert-Triage Japan FSA Cybersecurity Security Monitoring + SOC 24x7 Operations + SIEM + EDR + MDR + XDR + Detection + Alert Triage + Threat Hunting + Incident Response Integration + Threat Intelligence Integration + UEBA MTCS-Logging-Monitoring-Compliance-Audit-SLA-Configuration-SIEM-SOAR-Cloud-Monitoring-CSPM MTCS Logging + Monitoring + Compliance + Audit + SLA + Configuration + SIEM + SOAR + CSPM NERCCIP-5 System Security Management + Configuration Change Management and Vulnerability Assessments (CIP-007 + CIP-010) NISTSP144-8 Monitoring, Incident Response, Exit Strategy, and Compliance NISTSP145-8 Governance, Reporting, and Stakeholder Education on Cloud Definition NISTSP82-6 OT Audit, Monitoring, Anomaly Detection, and OT-Specific SOC NZISM-5 Network Security, System Hardening, and Application Security DSOMM-5 Information Gathering, Logging, Monitoring, and Incident Response OMANCS-6 Security Monitoring, Detection, Incident Response, and OmanCERT Notification IM8-SEC.3 Network Security ISMSP-SYS-03 Security Monitoring and Log Management TEFCAREC-1 Common Agreement Conformance and Onboarding TSAPIPE-2 OT/IT Network Segmentation and Access Control UK-TSA-MON-01 Security Monitoring US-SEC-DA-SC-03 ETF Framework Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected .
Other controls in Detecting Cyber Security Incidents and Responding You are reading one control. How much of ASD Strategies to Mitigate Cyber Security Incidents have you already done? ASD Strategies to Mitigate Cyber Security Incidents ASD37-32 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ASD Strategies to Mitigate Cyber Security Incidents your existing evidence covers. Hold NIST SP 800-53 Rev 5 and 32 of 37 ASD Strategies to Mitigate Cyber Security Incidents controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the NIST SP 800-53 Rev 5 pair alone.
Query this from an agent The graph holds this control, the 94 it maps to, and the evidence behind each claim, over MCP and REST.