DORA DORA-Art.10: Detection

What else in your programme already covers this

This control maps to 47 controls across 15 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 7 controls

CCM-IVS-02 Capacity and Resource Planning
CCM-IVS-09 Network Defense
CCM-LOG-01 Logging and Monitoring Policy and Procedures
CCM-LOG-03 Security Monitoring and Alerting
CCM-LOG-05 Audit Logs Monitoring and Response
CCM-LOG-07 Logging Scope
CCM-LOG-13 Failures and Anomalies Reporting

CIS Controls v8 · 4 controls

CIS-13.1 Centralize Security Event Alerting
CIS-13.11 Tune Security Event Alerting Thresholds
CIS-13.2 Deploy a Host-Based Intrusion Detection Solution
CIS-13.3 Deploy a Network Intrusion Detection Solution

FedRAMP High · 4 controls

AU-6 Audit Record Review, Analysis, and Reporting
CA-7 Continuous Monitoring
SI-4 System Monitoring
SI-5 Security Alerts, Advisories, and Directives

FedRAMP Moderate · 4 controls

AU-6 Audit Record Review, Analysis, and Reporting
CA-7 Continuous Monitoring
SI-4 System Monitoring
SI-5 Security Alerts, Advisories, and Directives

NIST Cybersecurity Framework 2.0 · 4 controls

NIST-CSF-DE.AE-02 Potentially adverse events are analyzed to better understand associated activities
NIST-CSF-DE.AE-08 Incidents are declared when adverse events meet the defined incident criteria
NIST-CSF-DE.CM-01 Networks and network services are monitored to find potentially adverse events
NIST-CSF-DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events

NIST SP 800-53 Rev 5 · 4 controls

NIST800-AU-6 AU-6 Audit Record Review, Analysis, and Reporting
NIST800-CA-7 CA-7 Continuous Monitoring
NIST800-SI-4 SI-4 System Monitoring
NIST800-SI-5 SI-5 Security Alerts, Advisories, and Directives

SOC 2 · 4 controls

SOC2-CC6.8 CC6.8 Preventing and detecting unauthorised or malicious software
SOC2-CC7.1 CC7.1 Detecting configuration changes and new vulnerabilities
SOC2-CC7.2 CC7.2 Monitoring system components for anomalies
SOC2-CC7.3 CC7.3 Evaluating security events to identify incidents

C5 (Germany) · 3 controls

C5-COS-01 Technical safeguards
C5-OPS-10 Logging and Monitoring - Concept
C5-OPS-13 Logging and Monitoring - Identification of Events

ISO 27001:2022 · 3 controls

5.25 Assessment and decision on information security events
8.15 Logging
8.16 Monitoring activities

ISO 27002:2022 · 3 controls

5.25 Assessment and decision on information security events
8.15 Logging
8.16 Monitoring activities

NIST SP 800-161 Rev 1 · 3 controls

161R1-AU-6 Audit Review, Analysis, and Reporting
161R1-RA-10 Threat Hunting
161R1-SI-4 System Monitoring

APRA CPS 230 Operational Risk Management · 1 control

CPS230-P40 Required Content of the Business Continuity Plan

EBA Guidelines on ICT and Security Risk Management (EBA/GL/2019/04) · 1 control

EBA-GL-3.4.5 Security monitoring

EIOPA Guidelines on ICT Security and Governance (EIOPA-BoS-20/600) · 1 control

EIOPA-ICTSG-GL.11 Security monitoring

NIS2 Directive · 1 control

Art.21.2.b Incident handling

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of DORA have you already done?

DORA DORA-Art.10 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of DORA your existing evidence covers. Hold NIS2 Directive and 17 of 26 DORA controls already carry evidence.

If you hold NIS2 Directive65.4% covered · 9 gaps If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.157.7% covered · 11 gaps If you hold ISO 27001:202253.8% covered · 12 gaps If you hold ISO 27002:202253.8% covered · 12 gaps If you hold NIST SP 800-53 Rev 553.8% covered · 12 gaps If you hold NIST Cybersecurity Framework 2.050% covered · 13 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the NIS2 Directive pair alone.

See the released pairs, $299 each Browse the graph free