Azure Security Benchmark DP-2: Monitor anomalies and threats targeting sensitive data

What else in your programme already covers this

This control maps to 43 controls across 21 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 4 controls

CCM-DSP-17 Sensitive Data Protection
CCM-LOG-03 Security Monitoring and Alerting
CCM-LOG-05 Audit Logs Monitoring and Response
CCM-UEM-11 Data Loss Prevention

PCI DSS 4.0 · 4 controls

10.2.1.1 10.2.1.1 Logs capture individual user access to cardholder data
10.4.1 10.4.1 Daily review of security-relevant logs
11.5.1.1 11.5.1.1 Service providers detect covert malware channels
7.2.6 7.2.6 Query access to stored cardholder data restricted

FedRAMP High · 3 controls

IR-9 Information Spillage Response (IR-9)
SI-4 System Monitoring
SI-4(18) System Monitoring | Analyze Traffic and Covert Exfiltration (SI-4(18))

FedRAMP Moderate · 3 controls

IR-9 Information Spillage Response (IR-9)
SI-4 System Monitoring
SI-4(18) System Monitoring | Analyze Traffic and Covert Exfiltration (SI-4(18))

ISO 27001:2022 · 3 controls

8.12 Data leakage prevention
8.16 Monitoring activities
8.3 Information access restriction

ISO 27002:2022 · 3 controls

8.12 Data leakage prevention
8.16 Monitoring activities
8.3 Information access restriction

NIST SP 800-53 Rev 5 · 3 controls

NIST800-AU-13 AU-13 Monitoring for Information Disclosure
NIST800-IR-9 IR-9 Information Spillage Response
NIST800-SI-4 SI-4 System Monitoring

AWS Well-Architected Security Pillar · 2 controls

SEC04-BP03 Correlate and enrich security alerts
SEC08-BP04 Enforce access control

Australia Consumer Data Right - Banking (CDR) · 2 controls

AUCDR-IS-3 Securely manage information assets over their lifecycle
AUCDR-PS-12 Privacy Safeguard 12 - Security of CDR data and destruction or de-identification of redundant CDR data

CIS Controls v8 · 2 controls

CIS-3.13 Deploy a Data Loss Prevention Solution
CIS-3.14 Log Sensitive Data Access

CMMC 2.0 · 2 controls

SI.L2-3.14.6 Monitor Communications for Attacks
SI.L2-3.14.7 Identify Unauthorized Use

NIST SP 800-161 Rev 1 · 2 controls

161R1-SI-20 Tainting
161R1-SI-4 System Monitoring

SOC 2 · 2 controls

SOC2-CC6.7 CC6.7 Restricting and protecting information in transmission, movement and removal
SOC2-CC7.2 CC7.2 Monitoring system components for anomalies

ASD Strategies to Mitigate Cyber Security Incidents · 1 control

ASD37-27 Outbound data loss prevention (Very Good)

Australia My Health Records Act 2012 · 1 control

MYHR-SEC-3 Audit logging and access monitoring

C5 (Germany) · 1 control

C5-OPS-13 Logging and Monitoring - Identification of Events

HIPAA Security Rule · 1 control

164.308(a)(1)(ii)(D) Information System Activity Review (Required)

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events

NIST SP 800-171 Rev 3 · 1 control

03.14.06 System Monitoring

NIST SP 800-66 Rev 2 · 1 control

164.308(a)(1)(ii)(D) Information System Activity Review (Required)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of Azure Security Benchmark have you already done?

Azure Security Benchmark DP-2 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of Azure Security Benchmark your existing evidence covers. Hold NIST SP 800-53 Rev 5 and 71 of 85 Azure Security Benchmark controls already carry evidence.

If you hold NIST SP 800-53 Rev 583.5% covered · 14 gaps If you hold FedRAMP Moderate78.8% covered · 18 gaps If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.172.9% covered · 23 gaps If you hold ISO 27002:202269.4% covered · 26 gaps If you hold C5 (Germany)65.9% covered · 29 gaps If you hold ISO 27001:202261.2% covered · 33 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the NIST SP 800-53 Rev 5 pair alone.

See the released pairs, $299 each Browse the graph free