C5 (Germany) C5-COS-01: Technical safeguards

What else in your programme already covers this

This control maps to 66 controls across 20 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

CIS Controls v8 · 6 controls

CIS-12.2 Establish and Maintain a Secure Network Architecture
CIS-13.3 Deploy a Network Intrusion Detection Solution
CIS-13.4 Perform Traffic Filtering Between Network Segments
CIS-13.6 Collect Network Traffic Flow Logs
CIS-4.2 Establish and Maintain a Secure Configuration Process for Network Infrastructure
CIS-4.4 Implement and Manage a Firewall on Servers

FedRAMP High · 6 controls

AU-6(1) Automated Process Integration
SC-1 Policy and Procedures
SC-5 Denial-of-Service Protection
SC-7 Boundary Protection
SI-4 System Monitoring
SI-4(4) Inbound and Outbound Communications Traffic

FedRAMP Moderate · 6 controls

AU-6(1) Automated Process Integration
SC-1 Policy and Procedures
SC-5 Denial-of-Service Protection
SC-7 Boundary Protection
SI-4 System Monitoring
SI-4(4) Inbound and Outbound Communications Traffic

ASD Strategies to Mitigate Cyber Security Incidents · 5 controls

ASD37-07 Web content filtering (Excellent)
ASD37-08 Deny direct internet connectivity (Excellent)
ASD37-25 Software firewall - inbound (Very Good)
ASD37-26 Software firewall - outbound (Very Good)
ASD37-32 Network-based IDS/IPS (Limited)

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 5 controls

CCM-IVS-01 Infrastructure and Virtualization Security Policy and Procedures
CCM-IVS-03 Network Security
CCM-IVS-09 Network Defense
CCM-LOG-03 Security Monitoring and Alerting
CCM-UEM-10 Software Firewall

PCI DSS 4.0 · 5 controls

1.1.1 1.1.1 Requirement 1 policies and procedures governed
1.2.6 1.2.6 Security features for insecure services in use
1.4.1 1.4.1 NSCs between trusted and untrusted networks
1.4.2 1.4.2 Restricting traffic entering trusted networks from outside
11.5.1 11.5.1 IDS/IPS monitoring of CDE traffic

Azure Security Benchmark · 4 controls

ASBv3-GS-4 Define and implement network security strategy
ASBv3-LT-1 Enable threat detection capabilities
ASBv3-NS-4 Deploy intrusion detection/intrusion prevention systems (IDS/IPS)
NS-3 Deploy firewall at the edge of enterprise network

NIST SP 800-53 Rev 5 · 4 controls

NIST800-SC-1 SC-1 Policy and Procedures
NIST800-SC-5 SC-5 Denial-of-service Protection
NIST800-SC-7 SC-7 Boundary Protection
NIST800-SI-4 SI-4 System Monitoring

AWS Well-Architected Security Pillar · 3 controls

SEC04-BP02 Capture logs, findings, and metrics in standardized locations
SEC05-BP02 Control traffic flow within your network layers
SEC05-BP03 Implement inspection-based protection

CMMC 2.0 · 3 controls

SC.L2-3.13.1 Boundary Protection
SC.L2-3.13.6 Network Communication by Exception
SI.L2-3.14.6 Monitor Communications for Attacks

NIST SP 800-161 Rev 1 · 3 controls

161R1-RA-10 Threat Hunting
161R1-SC-5 Denial-of-Service Protection
161R1-SI-4 System Monitoring

SOC 2 · 3 controls

SOC2-CC6.1 CC6.1 Logical access security over protected information assets
SOC2-CC6.6 CC6.6 Protection against threats from outside the system boundary
SOC2-CC7.2 CC7.2 Monitoring system components for anomalies

ISO 27001:2022 · 2 controls

8.16 Monitoring activities
8.20 Networks security

ISO 27002:2022 · 2 controls

8.16 Monitoring activities
8.20 Networks security

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-DE.CM-01 Networks and network services are monitored to find potentially adverse events
NIST-CSF-PR.IR-01 Networks and environments are protected from unauthorized logical access and usage

NIST SP 800-171 Rev 3 · 2 controls

03.13.01 Boundary Protection
03.14.06 System Monitoring

NIST SP 800-172 · 2 controls

3.11.3e Advanced Automation and Analytics Capabilities
3.14.2e Monitor Organizational Systems with Specialized Capabilities

ANSSI Guide d'hygiene informatique (42 mesures, v2.0) · 1 control

ANSSI-HYG-22 Put in Place a Secure Internet Access Gateway

APEC Cross-Border Privacy Rules (CBPR) System · 1 control

CBPR-PR-32 Detection, prevention and response measures

DORA · 1 control

DORA-Art.10 Detection

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of C5 (Germany) have you already done?

C5 (Germany) C5-COS-01 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of C5 (Germany) your existing evidence covers. Hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 and 95 of 121 C5 (Germany) controls already carry evidence.

If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.178.5% covered · 26 gaps If you hold NIST SP 800-53 Rev 572.7% covered · 33 gaps If you hold FedRAMP Moderate71.1% covered · 35 gaps If you hold ISO 27002:202267.8% covered · 39 gaps If you hold ISO 27001:202257% covered · 52 gaps If you hold NIST SP 800-171 Rev 350.4% covered · 60 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 pair alone.

See the released pairs, $299 each Browse the graph free