FedRAMP High AC-17(1): Monitoring and Control

What else in your programme already covers this

This control maps to 27 controls across 15 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST Cybersecurity Framework 2.0 · 4 controls

NIST-CSF-DE.CM-01 Networks and network services are monitored to find potentially adverse events
NIST-CSF-DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events
NIST-CSF-PR.IR-01 Networks and environments are protected from unauthorized logical access and usage
NIST-CSF-PR.PS-04 Log records are generated and made available for continuous monitoring

PCI DSS 4.0 · 4 controls

10.2.1 10.2.1 Audit logging enabled on all system components
10.4.1.1 10.4.1.1 Automated mechanisms used for audit log review
11.5.1 11.5.1 IDS/IPS monitoring of CDE traffic
8.4.3 8.4.3 MFA for remote access that could reach CDE

CIS Controls v8 · 3 controls

CIS-12.5 Centralize Network Authentication, Authorization, and Auditing (AAA)
CIS-12.7 Ensure Remote Devices Utilize a VPN and are Connecting to an Enterprise’s AAA Infrastructure
CIS-13.5 Manage Access Control for Remote Assets

AWS Well-Architected Security Pillar · 2 controls

SEC04-BP01 Configure service and application logging
SEC06-BP03 Reduce manual management and interactive access

Azure Security Benchmark · 2 controls

ASBv3-LT-2 Enable threat detection for identity and access management
IM-7 Restrict resource access based on conditions

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-IVS-03 Network Security
CCM-LOG-03 Security Monitoring and Alerting

SOC 2 · 2 controls

SOC2-CC6.6 CC6.6 Protection against threats from outside the system boundary
SOC2-CC7.1 CC7.1 Detecting configuration changes and new vulnerabilities

C5 (Germany) · 1 control

C5-COS-03 Monitoring of connections in the Cloud Service Provider's network

CMMC 2.0 · 1 control

AC.L2-3.1.12 Control Remote Access

NIST SP 800-171 Rev 3 · 1 control

03.01.12 Remote Access

NIST SP 800-53 Rev 5 · 1 control

NIST800-AC-17 AC-17 Remote Access

NIST SP 800-53 Rev 5 HIGH · 1 control

AC-17(1) AC-17(1) Remote Access | Monitoring and Control

NIST SP 800-53 Rev 5 MODERATE · 1 control

AC-17(1) AC-17(1) Remote Access | Monitoring and Control

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of FedRAMP High have you already done?

FedRAMP High AC-17(1) is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of FedRAMP High your existing evidence covers. Hold C5 (Germany) and 119 of 410 FedRAMP High controls already carry evidence.

If you hold C5 (Germany)29% covered · 291 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 6 were rejected on the C5 (Germany) pair alone.

See the released pairs, $299 each Browse the graph free