AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)
System Security and Operations

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) AWWA-4.4: Audit Logging and Monitoring

Implement logging and monitoring to detect security events across IT and operational technology environments.

Maintained by Gerard BlokdykControl text last updated

What else in your programme already covers this

This control maps to 108 controls across 71 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

BSI IT-Grundschutz · 3 controls

  • BSI-28 Audit event logging and storage
  • BSI-29 Audit record review and analysis
  • BSI-31 Audit log protection and retention

Belgium CyberFundamentals · 3 controls

  • BE-CF-28 Audit event logging and storage
  • BE-CF-29 Audit record review and analysis
  • BE-CF-31 Audit log protection and retention

NIST SP 800-53 Rev 5 · 3 controls

NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security · 3 controls

  • NISTSP82-2 OT Risk Assessment and Threat/Vulnerability Identification
  • NISTSP82-4 OT Access Control, Identity, Authentication, and Remote Access
  • NISTSP82-6 OT Audit, Monitoring, Anomaly Detection, and OT-Specific SOC

HL7 FHIR Security Framework · 2 controls

IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems · 2 controls

MARS-E · 2 controls

TISAX - Trusted Information Security Assessment Exchange · 2 controls

API 1164 · 1 control

Annex 11 to EU GMP - Computerised Systems · 1 control

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 1 control

  • CPG-4.B OT Cybersecurity Leadership

FDA 21 CFR Part 11 · 1 control

  • Part11.AuditTrail Audit trail requirements - secure computer-generated time-stamped (21 CFR §11.10(e))

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

FISMA · 1 control

FTC GLBA Safeguards Rule (16 CFR Part 314) · 1 control

  • FTC-Safeguards-9-Elements 9 Safeguard Elements - Access, Inventory, Encryption, Secure-Dev, MFA, Disposal, Change-Mgmt, Monitoring, Pen-Test (16 CFR 314.4(c))

FedRAMP Rev 5 · 1 control

  • FedRAMP-ConMon Continuous Monitoring (ConMon) and Significant Change Requests

GHG Protocol · 1 control

GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v6 · 1 control

Ghana Cybersecurity Act · 1 control

HITECH Act · 1 control

ICH E6(R3) - Good Clinical Practice · 1 control

IEC 62351 - Power Systems Communication Security · 1 control

IEC 62443 · 1 control

IEEE 1686 · 1 control

ISMAP (Japan) · 1 control

ISO 13485 · 1 control

ISO 27017 · 1 control

ISO 27018 · 1 control

ISO 27019 · 1 control

ISO 27043 · 1 control

ISO 27799 · 1 control

ISO/IEC 25012:2008 - Data Quality Model · 1 control

ISO/IEC 27011:2024 · 1 control

ISO/SAE 21434 · 1 control

MARS-E - Minimum Acceptable Risk Standards for Exchanges · 1 control

MDS2 (Medical Device) · 1 control

MITRE ATT&CK · 1 control

MITRE D3FEND · 1 control

MTCS (Singapore) · 1 control

NAIC Insurance Data Security Model Law (MDL-668) · 1 control

  • NAIC-2 Information Security Program (ISP) - Section 4

NIST Cybersecurity Framework 2.0 · 1 control

  • NIST-CSF-DE.CM-01 Networks and network services are monitored to find potentially adverse events

NIST Privacy Framework · 1 control

  • NISTPF-8 Protect-P Information Protection Processes (PR.PO-P)

NIST SP 1800-32 · 1 control

NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment) · 1 control

  • NISTSP115-2 Review Techniques - Documentation, Logs, Rulesets, Configurations

NIST SP 800-123 · 1 control

  • NISTSP123-5 Server Operations - Patching, Malware, Logging, Backup

NIST SP 800-137 · 1 control

  • NISTSP137-4 Security Status Reporting and Risk Score Aggregation

NIST SP 800-144 · 1 control

  • NISTSP144-8 Monitoring, Incident Response, Exit Strategy, and Compliance

NIST SP 800-145 · 1 control

  • NISTSP145-8 Governance, Reporting, and Stakeholder Education on Cloud Definition

NIST SP 800-146 · 1 control

NIST SP 800-190 · 1 control

NIST SP 800-61 · 1 control

  • NISTSP61-4 Detection and Analysis: Sources, Triage, Categorisation, Prioritisation

NIST SP 800-63-4 · 1 control

  • NISTSP63R4-8 Operational Audit, Session Management, Recovery, and Cross-cutting Controls

NIST SP 800-66 · 1 control

  • NISTSP66-6 Technical Safeguards: Access Control, Audit Controls, Integrity, Person Authentication

NIST SP 800-88 · 1 control

  • NISTSP88-7 Verification, Audit, Training, and Environmental/Safety Controls

NIST SP 800-92 · 1 control

  • NISTSP92-5 Log Analysis: Correlation, Baselining, Anomaly Detection, Alerting, Manual Review

O-RAN WG11 Security Specification · 1 control

  • ORANWG11-7 Logging, Monitoring, Incident Response, and Denial-of-Service Resilience

OWASP DevSecOps Maturity Model (DSOMM) · 1 control

  • DSOMM-3 Build, Deployment, Infrastructure Hardening, and Secrets Management

OWASP MASVS · 1 control

OWASP SAMM · 1 control

  • OWASPSAMM-5 Operations: Incident Management, Environment Management, Operational Management

OpenSSF Scorecard · 1 control

  • OSSFSC-7 Webhook Authentication, Contributors Diversity, Aggregate Score

PAS 1192-5:2015 - Security-Minded Approach to BIM and Digital Built Environments · 1 control

  • PASONE-4 Technical Security: CDE Configuration, BIM Tools, Encryption, Aggregation, Mobile Working

PIC/S Guide to Good Manufacturing Practice for Medicinal Products · 1 control

  • PICSGMP-4 Chapter 4: Documentation - System, Record-Keeping, Data Integrity

PTES · 1 control

SIG (Shared Assessments) · 1 control

  • SHAREASSESS-4 Vulnerability Management, Patching, Application Security

SLSA · 1 control

  • SUPCHAIN-2 Source Integrity - Branch Protection, Code Review, Two-Person Rule

Secure by Design: A Guide for Manufacturers (CISA) · 1 control

  • CISABD-1 Take Ownership of Customer Security Outcomes

Sigstore - Software Artifact Signing and Verification · 1 control

South Korea ISMS-P · 1 control

TSA Pipeline Cybersecurity Directives · 1 control

  • TSAPIPE-2 OT/IT Network Segmentation and Access Control

UK Security and Emergency Measures Direction (SEMD) - Water Industry · 1 control

US EPA Safe Drinking Water Act (SDWA) - Cybersecurity Requirements · 1 control

  • USSDWA-2 Cybersecurity Practices (Assessment, Access, Network, IR)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in System Security and Operations

Query this from an agent

The graph holds this control, the 108 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) controls