HIPAA Security Rule 164.308(a)(5)(ii)(C): Log-in Monitoring (Addressable)

What else in your programme already covers this

This control maps to 50 controls across 24 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

CIS Controls v8 · 6 controls

CIS-13.1 Centralize Security Event Alerting
CIS-13.11 Tune Security Event Alerting Thresholds
CIS-8.1 Establish and Maintain an Audit Log Management Process
CIS-8.11 Conduct Audit Log Reviews
CIS-8.2 Collect Audit Logs
CIS-8.5 Collect Detailed Audit Logs

NIST SP 800-53 Rev 5 · 6 controls

NIST800-AC-7 AC-7 Unsuccessful Logon Attempts
NIST800-AU-2 AU-2 Event Logging
NIST800-AU-6 AU-6 Audit Record Review, Analysis, and Reporting
NIST800-IA-5 IA-5 Authenticator Management
NIST800-IR-5 IR-5 Incident Monitoring
NIST800-SI-4 SI-4 System Monitoring

NIST Cybersecurity Framework 2.0 · 4 controls

NIST-CSF-DE.AE-02 Potentially adverse events are analyzed to better understand associated activities
NIST-CSF-DE.CM-03 Personnel activity and technology usage are monitored to find potentially adverse events
NIST-CSF-PR.PS-04 Log records are generated and made available for continuous monitoring
NIST-CSF-RS.AN-07 Incident data and metadata are collected, and their integrity and provenance are preserved

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 3 controls

CCM-LOG-03 Security Monitoring and Alerting
CCM-LOG-05 Audit Logs Monitoring and Response
CCM-LOG-13 Failures and Anomalies Reporting

NIST SP 800-171 Rev 3 · 3 controls

03.01.08 Unsuccessful Logon Attempts
03.03.05 Audit Record Review, Analysis, and Reporting
03.14.06 System Monitoring

PCI DSS 4.0 · 3 controls

10.2.1.4 10.2.1.4 Logs capture invalid logical access attempts
10.6.3 10.6.3 Time sync configuration and time data protected
8.3.4 8.3.4 Lockout after 10 attempts for 30 minutes

AWS Well-Architected Security Pillar · 2 controls

SEC04-BP01 Configure service and application logging
SEC04-BP03 Correlate and enrich security alerts

C5 (Germany) · 2 controls

C5-IDM-03 Locking and withdrawal of user accounts in the event of inactivity or multiple failed logins
C5-OPS-13 Logging and Monitoring - Identification of Events

CMMC 2.0 · 2 controls

AC.L2-3.1.8 Unsuccessful Logon Attempts
SI.L2-3.14.7 Identify Unauthorized Use

FedRAMP High · 2 controls

AC-2(12) Account Monitoring for Atypical Usage
AC-7 Unsuccessful Logon Attempts

FedRAMP Moderate · 2 controls

AC-2(12) Account Monitoring for Atypical Usage
AC-7 Unsuccessful Logon Attempts

SOC 2 · 2 controls

SOC2-CC7.1 CC7.1 Detecting configuration changes and new vulnerabilities
SOC2-CC7.2 CC7.2 Monitoring system components for anomalies

ACSC Essential Eight · 1 control

E8-MFA-ML3 Multi-Factor Authentication - Maturity Level 3

ANSSI Guide d'hygiene informatique (42 mesures, v2.0) · 1 control

ANSSI-HYG-36 Enable and Configure Logging on the Most Important Components

ASD Strategies to Mitigate Cyber Security Incidents · 1 control

ASD37-29 Host-based IDS/IPS (Very Good)

Australia My Health Records Act 2012 · 1 control

MYHR-SEC-3 Audit logging and access monitoring

Azure Security Benchmark · 1 control

ASBv3-LT-2 Enable threat detection for identity and access management

CFTC System Safeguards (17 CFR 37, 38, 39, 49) · 1 control

CFTC-SS-3 Information Security Category

NIST SP 800-161 Rev 1 · 1 control

161R1-AU-6 Audit Review, Analysis, and Reporting

NIST SP 800-172 · 1 control

3.14.2e Monitor Organizational Systems with Specialized Capabilities

UK Cyber Essentials · 1 control

CE-SC.5 Password-Based Authentication Quality

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of HIPAA Security Rule have you already done?

HIPAA Security Rule 164.308(a)(5)(ii)(C) is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of HIPAA Security Rule your existing evidence covers. Hold ISO 27001:2022 and 53 of 67 HIPAA Security Rule controls already carry evidence.

If you hold ISO 27001:202279.1% covered · 14 gaps If you hold ISO 27002:202279.1% covered · 14 gaps If you hold FedRAMP Moderate77.6% covered · 15 gaps If you hold NIST SP 800-53 Rev 577.6% covered · 15 gaps If you hold C5 (Germany)76.1% covered · 16 gaps If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.167.2% covered · 22 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 64 were rejected on the ISO 27001:2022 pair alone.

See the released pairs, $299 each Browse the graph free