Frameworks / FedRAMP High / SI-4 What else in your programme already covers this This control maps to 67 controls across 27 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
10.2.1 10.2.1 Audit logging enabled on all system components 10.2.1.2 10.2.1.2 Logs capture all administrative actions 10.4.1 10.4.1 Daily review of security-relevant logs 10.4.3 10.4.3 Exceptions and anomalies from log review addressed 10.7.1 10.7.1 Service providers detect critical control failures (superseded) 10.7.2 10.7.2 Detect and alert on critical security control failures 11.2.1 11.2.1 Detect authorized and rogue wireless access points 11.5.1 11.5.1 IDS/IPS monitoring of CDE traffic 12.10.5 12.10.5 Plan covers alerts from security monitoring systems 5.3.4 5.3.4 Anti-malware audit logs enabled and retained CIS-13.1 Centralize Security Event Alerting CIS-13.2 Deploy a Host-Based Intrusion Detection Solution CIS-13.3 Deploy a Network Intrusion Detection Solution CIS-13.6 Collect Network Traffic Flow Logs CIS-13.7 Deploy a Host-Based Intrusion Prevention Solution CIS-8.11 Conduct Audit Log Reviews CIS-8.2 Collect Audit Logs NIST-CSF-DE.AE-02 Potentially adverse events are analyzed to better understand associated activities NIST-CSF-DE.AE-03 Information is correlated from multiple sources NIST-CSF-DE.CM-01 Networks and network services are monitored to find potentially adverse events NIST-CSF-DE.CM-03 Personnel activity and technology usage are monitored to find potentially adverse events NIST-CSF-DE.CM-09 Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events NIST-CSF-ID.RA-03 Internal and external threats to the organization are identified and recorded NIST-CSF-PR.PS-04 Log records are generated and made available for continuous monitoring ASBv3-DS-7 Enable logging and monitoring in DevOps ASBv3-LT-1 Enable threat detection capabilities ASBv3-LT-2 Enable threat detection for identity and access management ASBv3-NS-4 Deploy intrusion detection/intrusion prevention systems (IDS/IPS) DP-2 Monitor anomalies and threats targeting sensitive data ASD37-29 Host-based IDS/IPS (Very Good) ASD37-30 Endpoint detection and response (Very Good) ASD37-32 Network-based IDS/IPS (Limited) ASD37-33 Capture network traffic (Limited) C5-COS-01 Technical safeguards C5-COS-03 Monitoring of connections in the Cloud Service Provider's network C5-OPS-13 Logging and Monitoring - Identification of Events SOC2-CC6.6 CC6.6 Protection against threats from outside the system boundary SOC2-CC7.1 CC7.1 Detecting configuration changes and new vulnerabilities SOC2-CC7.2 CC7.2 Monitoring system components for anomalies SEC04-BP01 Configure service and application logging SEC05-BP03 Implement inspection-based protection E8-APP-ML3 Application Control (ML3) CBPR-PR-32 Detection, prevention and response measures 8.16 Monitoring activities 8.16 Monitoring activities 3.14.2e Monitor Organizational Systems with Specialized Capabilities SI-4 SI-4 System Monitoring SI-4 SI-4 System Monitoring SI-4 SI-4 System Monitoring Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected .
Other controls in SI - System and Information Integrity You are reading one control. How much of FedRAMP High have you already done? FedRAMP High SI-4 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of FedRAMP High your existing evidence covers. Hold C5 (Germany) and 119 of 410 FedRAMP High controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 6 were rejected on the C5 (Germany) pair alone.
Query this from an agent The graph holds this control, the 67 it maps to, and the evidence behind each claim, over MCP and REST.