HKMA Cyber Resilience Assessment Framework (C-RAF)
Domain 4: Detection – HKMA Cyber Resilience Assessment Framework (C-RAF)

HKMA Cyber Resilience Assessment Framework (C-RAF) 4.3.A: 4.3 Cyber incident detection: advanced level

Advanced control principles for cyber incident detection (required, with baseline and intermediate, of an AI whose inherent risk is high). Automated tools detect unauthorised changes to critical system files, firewalls, IPS, IDS and other security devices; real-time network monitoring and detection tools send real-time alerts to the responsible team or a central security operations centre; tools correlate events from many sources enterprise-wide and alert on set parameters; sophisticated adaptive technologies alert the incident response team when enterprise threat indicators point to external or internal threats.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in Domain 4: Detection – HKMA Cyber Resilience Assessment Framework (C-RAF)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.