Frameworks / CIS Controls v8 / CIS-8.11 What else in your programme already covers this This control maps to 82 controls across 28 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
AC-2(12) Account Monitoring for Atypical Usage AC-22 Publicly Accessible Content AU-6 Audit Record Review, Analysis, and Reporting AU-6(3) Correlate Audit Record Repositories AU-7 Audit Record Reduction and Report Generation AU-7(1) Automatic Processing IR-1 Policy and Procedures SA-1 Policy and Procedures SI-4 System Monitoring AC-2(12) Account Monitoring for Atypical Usage AC-22 Publicly Accessible Content AU-6 Audit Record Review, Analysis, and Reporting AU-6(3) Correlate Audit Record Repositories AU-7 Audit Record Reduction and Report Generation AU-7(1) Automatic Processing IR-1 Policy and Procedures SA-1 Policy and Procedures SI-4 System Monitoring NIST-CSF-DE.AE-02 Potentially adverse events are analyzed to better understand associated activities NIST-CSF-DE.AE-04 The estimated impact and scope of adverse events are understood NIST-CSF-DE.CM-03 Personnel activity and technology usage are monitored to find potentially adverse events NIST-CSF-GV.OV-03 Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed NIST-CSF-PR.PS-04 Log records are generated and made available for continuous monitoring NIST-CSF-RS.AN-03 Analysis is performed to establish what has taken place during an incident and the root cause of the incident NIST-CSF-RS.AN-07 Incident data and metadata are collected, and their integrity and provenance are preserved NIST-CSF-RS.MA-02 Incident reports are triaged and validated 10.4.1 10.4.1 Daily review of security-relevant logs 10.4.1.1 10.4.1.1 Automated mechanisms used for audit log review 10.4.2 10.4.2 Periodic review of all other system component logs 10.4.3 10.4.3 Exceptions and anomalies from log review addressed 10.7.1 10.7.1 Service providers detect critical control failures (superseded) 10.7.3 10.7.3 Respond promptly to critical security control failures 12.4.1 12.4.1 Executive responsibility for a PCI DSS compliance program 5.25 Assessment and decision on information security events 5.36 Compliance with policies, rules and standards for information security 8.15 Logging 8.16 Monitoring activities NIST800-AU-6 AU-6 Audit Record Review, Analysis, and Reporting NIST800-AU-7 AU-7 Audit Record Reduction and Report Generation NIST800-SI-4 SI-4 System Monitoring SP800-53-CA Assessment, Authorization, and Monitoring Family SOC2-CC4.2 CC4.2 Evaluating and communicating control deficiencies (COSO principle 17) SOC2-CC7.1 CC7.1 Detecting configuration changes and new vulnerabilities SOC2-CC7.2 CC7.2 Monitoring system components for anomalies SOC2-CC7.3 CC7.3 Evaluating security events to identify incidents ISM-0109 Analysing workstation event logs ISM-1228 Analysing cyber security events for incidents ISM-1986 Analysing critical server event logs 5.7 Performance evaluation 5.7.1 Monitoring, measurement, analysis and evaluation 6.9.4 Logging and monitoring ASD37-28 Continuous incident detection and response (Excellent) ASD37-31 Hunt to discover incidents (Very Good) ASBv3-LT-1 Enable threat detection capabilities LT-5 Centralize security log management and analysis 9.1 Monitoring, measurement, analysis and evaluation 9.2 Internal audit 5.7 Threat intelligence 8.16 Monitoring activities 3.11.2e Threat Hunting 3.11.3e Advanced Automation and Analytics Capabilities E8-APP-ML3 Application Control (ML3) ANSSI-HYG-36 Enable and Configure Logging on the Most Important Components AUCDR-IS-1 Limit risk of unauthorised access to the CDR data environment C5-OPS-13 Logging and Monitoring - Identification of Events 03.03.05 Audit Record Review, Analysis, and Reporting Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected .
Other controls in CIS Control 8: Audit Log Management You are reading one control. How much of CIS Controls v8 have you already done? CIS Controls v8 CIS-8.11 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of CIS Controls v8 your existing evidence covers. Hold ISO 27001:2022 and 102 of 153 CIS Controls v8 controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 240 were rejected on the ISO 27001:2022 pair alone.
Query this from an agent The graph holds this control, the 82 it maps to, and the evidence behind each claim, over MCP and REST.