HKMA Cyber Resilience Assessment Framework (C-RAF) 4.4.B: 4.4 Threat monitoring and analysis: baseline level

Baseline control principles for threat monitoring and analysis (required of every AI (minimum for a low inherent risk)). Processes monitor threat intelligence to discover emerging threats.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Domain 4: Detection – HKMA Cyber Resilience Assessment Framework (C-RAF)

4.1.A 4.1 Vulnerability detection: advanced level
4.1.B 4.1 Vulnerability detection: baseline level
4.1.I 4.1 Vulnerability detection: intermediate level
4.2.A 4.2 Anomalies activity detection: advanced level
4.2.B 4.2 Anomalies activity detection: baseline level
4.2.I 4.2 Anomalies activity detection: intermediate level
4.3.A 4.3 Cyber incident detection: advanced level
4.3.B 4.3 Cyber incident detection: baseline level

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All HKMA Cyber Resilience Assessment Framework (C-RAF) controls