C5 (Germany) C5-OPS-16: Logging and Monitoring - Configuration

What else in your programme already covers this

This control maps to 74 controls across 24 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

FedRAMP High · 9 controls

AU-12 Audit Record Generation
AU-6 Audit Record Review, Analysis, and Reporting
AU-6(1) Automated Process Integration
AU-9 Protection of Audit Information
AU-9(4) Access by Subset of Privileged Users
CM-5 Access Restrictions for Change
CM-6 Configuration Settings
SI-4(2) Automated Tools and Mechanisms for Real-Time Analysis
SI-4(5) System-Generated Alerts

FedRAMP Moderate · 9 controls

AU-12 Audit Record Generation
AU-6 Audit Record Review, Analysis, and Reporting
AU-6(1) Automated Process Integration
AU-9 Protection of Audit Information
AU-9(4) Access by Subset of Privileged Users
CM-5 Access Restrictions for Change
CM-6 Configuration Settings
SI-4(2) Automated Tools and Mechanisms for Real-Time Analysis
SI-4(5) System-Generated Alerts

NIST SP 800-53 Rev 5 MODERATE · 7 controls

AU-12 Audit Record Generation
AU-6 Audit Record Review, Analysis, and Reporting
AU-6(1) Automated Process Integration
AU-9 Protection of Audit Information
AU-9(4) Access by Subset of Privileged Users
CM-5 Access Restrictions for Change
CM-6 Configuration Settings

NIST SP 800-53 Revision 5.1 HIGH · 7 controls

AU-12 Audit Record Generation
AU-6 Audit Record Review, Analysis, and Reporting
AU-6(1) Automated Process Integration
AU-9 Protection of Audit Information
AU-9(4) Access by Subset of Privileged Users
CM-5 Access Restrictions for Change
CM-6 Configuration Settings

NIST SP 800-53 Rev 5 LOW · 5 controls

AU-12 Audit Record Generation
AU-6 Audit Record Review, Analysis, and Reporting
AU-9 Protection of Audit Information
CM-5 Access Restrictions for Change
CM-6 Configuration Settings

NIST SP 800-53 Rev 5 · 4 controls

NIST800-AU-12 Audit record generation
NIST800-AU-6 Audit record review, analysis, and reporting
NIST800-AU-9 Protection of audit information
NIST800-CM-5 Access restrictions for change

CIS Controls v8 · 3 controls

CIS-13.1 Centralize Security Event Alerting
CIS-13.11 Tune Security Event Alerting Thresholds
CIS-8.1 Establish and Maintain an Audit Log Management Process

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 3 controls

CCM-IAM-12 Safeguard Logs Integrity
CCM-LOG-03 Security Monitoring and Alerting
CCM-LOG-04 Audit Logs Access and Accountability

ISO 27001:2022 · 3 controls

8.16 Monitoring activities
8.17 Clock synchronization
8.9 Configuration management

ISO 27002:2022 · 3 controls

8.15 Logging
8.16 Monitoring activities
8.2 Privileged access rights

PCI DSS 4.0 · 3 controls

10.3.4 File integrity or change detection on logs
10.4.1.1 Automated mechanisms for log review
12.10.5 IRP includes monitoring and response to security control alerts

AWS Well-Architected Security Pillar · 2 controls

SEC03-BP02 Grant least privilege access
SEC04-BP01 Configure service and application logging

Azure Security Benchmark · 2 controls

ASBv3-AM-4 Limit access to asset management
ASBv3-IR-3 Detection and analysis - create incidents based on high-quality alerts

CMMC 2.0 · 2 controls

AU.L2-3.3.5 Audit Correlation
AU.L2-3.3.9 Audit Management

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-DE.AE-06 Information on adverse events is provided to authorized staff and tools
NIST-CSF-PR.PS-01 Configuration management practices are established and applied

NIST SP 800-171 Rev 3 · 2 controls

03.03.05 Audit Record Review, Analysis, and Reporting
03.03.08 Protection of Audit Information

ANSSI Guide d'hygiene informatique (42 mesures, v2.0) · 1 control

ANSSI-HYG-36 Enable and Configure Logging on the Most Important Components

ASD Strategies to Mitigate Cyber Security Incidents · 1 control

ASD37-33 Capture network traffic (Limited)

DORA · 1 control

DORA-Art.9 Protection and prevention

NIST SP 800-218 · 1 control

SP800-218-PS.1.1 Protect All Forms of Code from Unauthorized Modification

SOC 2 · 1 control

SOC2-CC7.1 Detection and monitoring procedures for security events are in place

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of C5 (Germany) have you already done?

C5 (Germany) C5-OPS-16 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of C5 (Germany) your existing evidence covers. Hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 and 95 of 121 C5 (Germany) controls already carry evidence.

If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.178.5% covered · 26 gaps If you hold NIST SP 800-53 Rev 572.7% covered · 33 gaps If you hold FedRAMP Moderate71.1% covered · 35 gaps If you hold ISO 27002:202267.8% covered · 39 gaps If you hold ISO 27001:202257% covered · 52 gaps If you hold NIST SP 800-171 Rev 350.4% covered · 60 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 pair alone.

See the released pairs, $299 each Browse the graph free