The firewall keeps an audit log and disables all communications with an error if the log fills; the log records all configuration changes, all successful and unsuccessful connection attempts, and source and destination IP addresses, ports, protocols and where possible MAC addresses; a threshold of unsuccessful attempts may deny further requests and notify the administrator.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.