MITRE D3FEND MITRE-D3FEND-Detect-Tactic-File-Process-Network-Identifier-Message-Platform-Analysis-SIEM-EDR: MITRE D3FEND Detect Tactic + File + Process + Network + Identifier + Message + Platform Analysis + SIEM + EDR

What else in your programme already covers this

This control maps to 35 controls across 23 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

BSI IT-Grundschutz · 3 controls

BSI-28 Audit event logging and storage
BSI-29 Audit record review and analysis
BSI-31 Audit log protection and retention

HL7 FHIR Security Framework · 2 controls

HL7-FHIR-Audit-Provenance-DigitalSignatures-Integrity HL7 FHIR Audit + Provenance + Digital Signatures + AuditEvent Resource + Audit Log Integrity + Retention
HL7-FHIR-Transport-TLS-Communication HL7 FHIR Transport Security - TLS 1.2+, Communication Security, Time Keeping, Server CapabilityStatement

IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems · 2 controls

IACS-UR-E26-Detect-Logging-Monitoring-Audit-Alerting IACS UR E26 Detect Goal - Logging + Network Monitoring + Audit Trail + Alerting + SIEM
IACS-UR-E27-Logging-Forensics-EventCapture IACS UR E27 - Equipment Logging + Forensic Readiness + Event Capture + Tamper Detection

MARS-E · 2 controls

MARS-E-Audit-Accountability-Continuous-Monitoring-AU-Family-CM-Family-SIEM-Log-Retention-IRS-Pub-1075 MARS-E Audit + Accountability + Continuous Monitoring + AU + CM Families + SIEM + IRS Pub 1075
MARS-E-Cross-Program-Coordination-IRS-Pub-1075-FedRAMP-CMS-ARS-HHS-OIG-Joint-Audit-3PAO MARS-E Cross-Program + IRS Pub 1075 + FedRAMP + CMS ARS + HHS OIG + Joint Audit + 3PAO

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

AWWA-4.4 Audit Logging and Monitoring

Annex 11 to EU GMP - Computerised Systems · 1 control

Clause 9 Audit trails

FDA 21 CFR Part 11 · 1 control

Part11.AuditTrail Audit trail requirements - secure computer-generated time-stamped (21 CFR §11.10(e))

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

CAT-D3-2 Detective controls

FISMA · 1 control

FISMA-NIST-800-53-RMF-800-171-FIPS Operationalisation via NIST 800-53 + 800-37 RMF + 800-171 + FIPS 199 + FIPS 200

FTC GLBA Safeguards Rule (16 CFR Part 314) · 1 control

FTC-Safeguards-9-Elements 9 Safeguard Elements - Access, Inventory, Encryption, Secure-Dev, MFA, Disposal, Change-Mgmt, Monitoring, Pen-Test (16 CFR 314.4(c))

FedRAMP Rev 5 · 1 control

FedRAMP-ConMon Continuous Monitoring (ConMon) and Significant Change Requests

GHG Protocol · 1 control

GHG-Suite-Corporate-Principles GHG Protocol Suite, Corporate Standard and 5 Reporting Principles

GLOBALG.A.P. Integrated Farm Assurance (IFA) Standard v6 · 1 control

GGAP-IFA-AllFarmBase-Mgmt-Workers-Env-Trace GLOBALG.A.P. IFA v6 All Farm Base (AF): Management, Workers, Environment, Traceability and Food Safety

Ghana Cybersecurity Act · 1 control

GhCSA-Implementation-Roadmap Implementation Roadmap - Organizational Roles, Tooling and Metrics

HITECH Act · 1 control

HITECH-Coord-HIPAA-Privacy-Security-Cures-ONC HITECH Coordination with HIPAA Privacy Rule + HIPAA Security Rule (Verified Separately) + 21st Century Cures Act + ONC

ICH E6(R3) - Good Clinical Practice · 1 control

ICH-E6-Annex1-ElectronicSystems-CSV-eSig-Audit-ALCOA-DataIntegrity ICH E6(R3) Annex 1 - Computer Systems + Computer System Validation (CSV) + Electronic Signature + Audit Trail + ALCOA+ Data Integrity

IEC 62351 - Power Systems Communication Security · 1 control

62351-14 Cyber security event logging

ISMAP (Japan) · 1 control

ISMAP-CloudOperations-Monitoring-Logging-IncidentResponse-NISC-Reporting-Vulnerability-Change-SLA ISMAP Cloud Operations - Security Monitoring + SIEM + Logging + Incident Response + NISC Reporting + Vulnerability Management + Penetration Testing + Change Management + SLA Management

ISO/IEC 27011:2024 · 1 control

27011-8.4 Logging and monitoring

MDS2 (Medical Device) · 1 control

MDS2-Audit-Logging-AUDT-Integrity-IGAU-Cybersecurity-Risk-CYBR-Monitoring MDS2 Audit Controls + AUDT + Integrity + IGAU + Cybersecurity Risk + CYBR + Continuous Monitoring

MITRE ATT&CK · 1 control

MITRE-ATTACK-Detection-Data-Sources-Analytics-Sigma-Splunk-KQL-Yara-Snort-SIEM-Hunt-Engineering MITRE ATT&CK Detection + Data Sources + Analytics + Sigma + SPL + KQL + Yara + Snort + SIEM + Hunt

OWASP ASVS · 1 control

OWASPASVS-7 Error Handling and Logging (V7)

OWASP Top 10:2025 · 1 control

OWASPTOP10-9 A09:2025 Security Logging and Monitoring Failures

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.