NIST Cybersecurity Framework 2.0 NIST-CSF-DE.AE-06: Information on adverse events is provided to authorized staff and tools

What else in your programme already covers this

This control maps to 78 controls across 31 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

FedRAMP High · 8 controls

AU-5 Response to Audit Logging Process Failures
AU-6 Audit Record Review, Analysis, and Reporting
IR-6(3) Incident Reporting | Supply Chain Coordination (IR-6(3))
IR-7 Incident Response Assistance
IR-7(1) Incident Response Assistance | Automation Support for Availability of Information and Support (IR-7(1))
PE-13(2) Fire Protection | Suppression Systems: Automatic Activation and Notification (PE-13(2))
SI-4(5) System-Generated Alerts
SI-5 Security Alerts, Advisories, and Directives

FedRAMP Moderate · 8 controls

AU-5 Response to Audit Logging Process Failures
AU-6 Audit Record Review, Analysis, and Reporting
IR-6(3) Incident Reporting | Supply Chain Coordination (IR-6(3))
IR-7 Incident Response Assistance
IR-7(1) Incident Response Assistance | Automation Support for Availability of Information and Support (IR-7(1))
PE-13(2) Fire Protection | Suppression Systems: Automatic Activation and Notification (PE-13(2))
SI-4(5) System-Generated Alerts
SI-5 Security Alerts, Advisories, and Directives

NIST SP 800-53 Rev 5 · 7 controls

NIST800-AU-13 AU-13 Monitoring for Information Disclosure
NIST800-AU-6 AU-6 Audit Record Review, Analysis, and Reporting
NIST800-IR-4 IR-4 Incident Handling
NIST800-IR-5 IR-5 Incident Monitoring
NIST800-IR-6 IR-6 Incident Reporting
NIST800-IR-7 IR-7 Incident Response Assistance
NIST800-SI-4 SI-4 System Monitoring

PCI DSS 4.0 · 6 controls

10.4.1 10.4.1 Daily review of security-relevant logs
10.7.1 10.7.1 Service providers detect critical control failures (superseded)
10.7.2 10.7.2 Detect and alert on critical security control failures
10.7.3 10.7.3 Respond promptly to critical security control failures
11.6.1 11.6.1 Payment page tamper detection
12.10.5 12.10.5 Plan covers alerts from security monitoring systems

CIS Controls v8 · 4 controls

CIS-13.1 Centralize Security Event Alerting
CIS-14.7 Train Workforce on How to Identify and Report if Their Enterprise Assets are Missing Security Updates
CIS-17.3 Establish and Maintain an Enterprise Process for Reporting Incidents
CIS-17.6 Define Mechanisms for Communicating During Incident Response

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 4 controls

CCM-LOG-03 Security Monitoring and Alerting
CCM-LOG-05 Audit Logs Monitoring and Response
CCM-LOG-13 Failures and Anomalies Reporting
CCM-SEF-08 Points of Contact Maintenance

ISO 27001:2022 · 4 controls

5.24 Information security incident management planning and preparation
5.26 Response to information security incidents
5.28 Collection of evidence
8.15 Logging

ISO 27002:2022 · 4 controls

5.26 Response to information security incidents
5.28 Collection of evidence
5.5 Contact with authorities
6.8 Information security event reporting

SOC 2 · 4 controls

SOC2-CC4.2 CC4.2 Evaluating and communicating control deficiencies (COSO principle 17)
SOC2-CC7.3 CC7.3 Evaluating security events to identify incidents
SOC2-CC7.4 CC7.4 Responding to security incidents
SOC2-P6.3 P6.3 Record of unauthorised disclosures and breaches

CMMC 2.0 · 3 controls

AU.L2-3.3.4 Audit Failure Alerting
AU.L2-3.3.6 Reduction & Reporting
IR.L2-3.6.2 Incident Reporting

NIST SP 800-171 Rev 3 · 3 controls

03.03.05 Audit Record Review, Analysis, and Reporting
03.06.02 Incident Monitoring, Reporting, and Response Assistance
03.14.03 Security Alerts, Advisories, and Directives

Australian Information Security Manual · 2 controls

ISM-0123 Reporting incidents to the CISO
ISM-0733 CISO awareness of all incidents

HIPAA Security Rule · 2 controls

164.308(a)(5)(ii)(B) Protection from Malicious Software (Addressable)
164.308(a)(6)(ii) Response and Reporting (Required)

NIST SP 800-66 Rev 2 · 2 controls

164.308(a)(5)(ii)(B) Protection from Malicious Software (Addressable)
164.308(a)(6)(ii) Response and Reporting (Required)

APRA CPS 234 · 1 control

CPS234-P25 Response Plan Content and Escalation Mechanisms

ASD Strategies to Mitigate Cyber Security Incidents · 1 control

ASD37-30 Endpoint detection and response (Very Good)

AWS Well-Architected Security Pillar · 1 control

SEC04-BP02 Capture logs, findings, and metrics in standardized locations

Australia My Health Records Act 2012 · 1 control

MYHR-ENF-1 Mandatory data breach notification

Azure Security Benchmark · 1 control

ASBv3-IR-2 Preparation - setup incident notification

C5 (Germany) · 1 control

C5-OPS-16 Logging and Monitoring - Configuration

CFTC System Safeguards (17 CFR 37, 38, 39, 49) · 1 control

CFTC-SS-16 Security Incident Response Plan and Testing

ISO 22301:2019 · 1 control

8.4.3 Warning and communication

ISO 27701:2019 · 1 control

6.13.1 Management of information security incidents and improvements

ISO/IEC 42001:2023 · 1 control

A.6.2.6 AI system operation and monitoring

NIS2 Directive · 1 control

Art.21.2.b Incident handling

NIST Cybersecurity Framework 1.0 · 1 control

DE.DP-4 DE.DP-4: Event detection information is communicated to appropriate parties

NIST Cybersecurity Framework 1.1 · 1 control

DE.DP-4 DE.DP-4: Event detection information is communicated

NIST SP 800-161 Rev 1 · 1 control

161R1-AU-16 Cross-Organizational Audit Logging

NIST SP 800-172 · 1 control

3.6.1e Establish Security Operations Center (SOC)

NIST SP 800-61 Rev. 3 · 1 control

DE.AE-06 DE.AE-06 Alerts and findings delivered to the SOC and responders, with ticketing

US Executive Order 14144 - Strengthening and Promoting Innovation in the Nation's Cybersecurity · 1 control

3(c)(ii)(A) Sec. 3(c)(ii)(A) (now 3(a)(ii)(A)) Provide CISA the EDR and SOC data the concept of operations requires

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.