Belgium CyberFundamentals BE-CF-17: Continuous monitoring strategy

What else in your programme already covers this

This control maps to 38 controls across 15 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

API 1164 · 3 controls

API1164-07 Remote Access
API1164-13 Business Continuity and Recovery
API1164-24 Vulnerability assessment for critical systems

ISO/IEC 29134:2023 · 3 controls

29134-1 Scope
29134-3 Terms and definitions
29134-9.1 PIA report structure

ASD Strategies to Mitigate Cyber Security Incidents · 2 controls

ASD37-29 Host-based IDS/IPS (Very Good)
ASD37-32 Network-based IDS/IPS (Limited)

ISO/IEC 27557:2022 - Organisational Privacy Risk Management · 2 controls

27557-4.3 Individual impact consideration
27557-6.3 Privacy risk assessment

SQF Code Edition 9 - Safe Quality Food · 2 controls

2.4.4 Hazard Analysis and Risk Assessment
2.7.2 Food Fraud Plan

AML/CTF Act 2006 (Australia) · 1 control

AMLCTF-PartA-RiskAssess ML/TF Risk Assessment

ASIS SPC.1-2009 - Organizational Resilience Standard · 1 control

4.3.1 Risk Assessment and Impact Analysis

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

AWWA-1.2 Risk Assessment

Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018) · 1 control

AT-DSG-6 Sections 12-13 - Image processing (video surveillance/CCTV)

Barbados Data Protection Act 2019 · 1 control

BB-DPA-20 Sections 50-60 - Registration and Responsibilities

ISO/IEC 27006-1:2024 · 1 control

27006-9.4 Surveillance and recertification

ISO/IEC 27031:2011 · 1 control

27031-7.2 Resource Requirements

ISO/IEC 27400:2022 · 1 control

27400-6.5 Security monitoring and incident response

ISO/IEC 29147:2018 · 1 control

29147-5.11 Researcher Safe Harbour and Legal Posture

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-DE.CM-01 Networks and network services are monitored to find potentially adverse events

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.