HKMA Cyber Resilience Assessment Framework (C-RAF)
Domain 4: Detection – HKMA Cyber Resilience Assessment Framework (C-RAF)

HKMA Cyber Resilience Assessment Framework (C-RAF) 4.2.A: 4.2 Anomalies activity detection: advanced level

Advanced control principles for anomalies activity detection (required, with baseline and intermediate, of an AI whose inherent risk is high). Anomalies and network and system alerts are correlated across business units to catch multi-faceted attacks (for example account takeover combined with DDoS); employee behaviour analytics alert on anomalies; sensitive data and files are monitored to prevent loss; defence-in-depth measures detect and respond to network attacks shown by anomalous ingress or egress or DDoS; external transfers from customer accounts raise alerts and need review and authorisation when behaviour is anomalous.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Domain 4: Detection – HKMA Cyber Resilience Assessment Framework (C-RAF)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.