NIST Cybersecurity Framework 2.0 NIST-CSF-DE.CM-01: Networks and network services are monitored to find potentially adverse events

What else in your programme already covers this

This control maps to 141 controls across 44 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

FedRAMP High · 15 controls

AC-17(1) Monitoring and Control
AU-6(1) Automated Process Integration
CA-7 Continuous Monitoring
CA-7(4) Continuous Monitoring | Risk Monitoring (CA-7(4))
IR-1 Policy and Procedures
IR-5 Incident Monitoring
SA-1 Policy and Procedures
SA-2 Allocation of Resources
SC-7 Boundary Protection
SI-4 System Monitoring
SI-4(1) System Monitoring | System-wide Intrusion Detection System (SI-4(1))
SI-4(18) System Monitoring | Analyze Traffic and Covert Exfiltration (SI-4(18))
SI-4(2) Automated Tools and Mechanisms for Real-Time Analysis
SI-4(4) Inbound and Outbound Communications Traffic
SR-10 Inspection of Systems or Components (SR-10)

FedRAMP Moderate · 15 controls

AC-17(1) Monitoring and Control
AU-6(1) Automated Process Integration
CA-7 Continuous Monitoring
CA-7(4) Continuous Monitoring | Risk Monitoring (CA-7(4))
IR-1 Policy and Procedures
IR-5 Incident Monitoring
SA-1 Policy and Procedures
SA-2 Allocation of Resources
SC-7 Boundary Protection
SI-4 System Monitoring
SI-4(1) System Monitoring | System-wide Intrusion Detection System (SI-4(1))
SI-4(18) System Monitoring | Analyze Traffic and Covert Exfiltration (SI-4(18))
SI-4(2) Automated Tools and Mechanisms for Real-Time Analysis
SI-4(4) Inbound and Outbound Communications Traffic
SR-10 Inspection of Systems or Components (SR-10)

NIST SP 800-53 Rev 5 · 12 controls

NIST800-AU-13 AU-13 Monitoring for Information Disclosure
NIST800-AU-6 AU-6 Audit Record Review, Analysis, and Reporting
NIST800-AU-7 AU-7 Audit Record Reduction and Report Generation
NIST800-CA-7 CA-7 Continuous Monitoring
NIST800-IR-5 IR-5 Incident Monitoring
NIST800-PM-31 PM-31 Continuous Monitoring Strategy
NIST800-RA-10 RA-10 Threat Hunting
NIST800-SC-26 SC-26 Decoys
NIST800-SC-35 SC-35 External Malicious Code Identification
NIST800-SI-4 SI-4 System Monitoring
NIST800-SI-6 SI-6 Security and Privacy Function Verification
SP800-53-AU Audit and Accountability Family

CIS Controls v8 · 8 controls

CIS-12.5 Centralize Network Authentication, Authorization, and Auditing (AAA)
CIS-13.11 Tune Security Event Alerting Thresholds
CIS-13.3 Deploy a Network Intrusion Detection Solution
CIS-13.6 Collect Network Traffic Flow Logs
CIS-13.8 Deploy a Network Intrusion Prevention Solution
CIS-8.6 Collect DNS Query Audit Logs
CIS-8.7 Collect URL Request Audit Logs
CIS-9.2 Use DNS Filtering Services

PCI DSS 4.0 · 8 controls

10.7.1 10.7.1 Service providers detect critical control failures (superseded)
11.2.1 11.2.1 Detect authorized and rogue wireless access points
11.3.2 11.3.2 Quarterly ASV external vulnerability scans
11.5.1 11.5.1 IDS/IPS monitoring of CDE traffic
11.5.1.1 11.5.1.1 Service providers detect covert malware channels
11.6.1 11.6.1 Payment page tamper detection
12.10.5 12.10.5 Plan covers alerts from security monitoring systems
6.4.2 6.4.2 Automated web attack detection and prevention

ASD Strategies to Mitigate Cyber Security Incidents · 6 controls

ASD37-07 Web content filtering (Excellent)
ASD37-26 Software firewall - outbound (Very Good)
ASD37-27 Outbound data loss prevention (Very Good)
ASD37-28 Continuous incident detection and response (Excellent)
ASD37-32 Network-based IDS/IPS (Limited)
ASD37-33 Capture network traffic (Limited)

ISO 27701:2019 · 6 controls

5.6 Operation
5.7.1 Monitoring, measurement, analysis and evaluation
6.10.1 Network security management
6.9 Operations security
6.9.4 Logging and monitoring
6.9.7 Information systems audit considerations

CMMC 2.0 · 5 controls

AC.L2-3.1.17 Wireless Access Protection
AU.L2-3.3.1 System Auditing
AU.L2-3.3.4 Audit Failure Alerting
CA.L2-3.12.3 Security Control Monitoring
SI.L2-3.14.6 Monitor Communications for Attacks

ISO 27002:2022 · 4 controls

5.28 Collection of evidence
8.16 Monitoring activities
8.20 Networks security
8.21 Security of network services

NIST Cybersecurity Framework 1.0 · 4 controls

DE.CM-1 DE.CM-1: The network is monitored to detect potential cybersecurity events
DE.CM-4 DE.CM-4: Malicious code is detected
DE.CM-5 DE.CM-5: Unauthorized mobile code is detected
DE.CM-7 DE.CM-7: Monitoring for unauthorized personnel, connections, devices, and software is performed

NIST Cybersecurity Framework 1.1 · 4 controls

DE.CM-1 DE.CM-1: The network is monitored to detect potential cybersecurity events
DE.CM-4 DE.CM-4: Malicious code is detected
DE.CM-5 DE.CM-5: Unauthorized mobile code is detected
DE.CM-7 DE.CM-7: Monitoring for unauthorized personnel, connections, devices, and software is performed

Australian Information Security Manual · 3 controls

ISM-1028 NIDS or NIPS at external gateways
ISM-1030 NIDS placement and firewall rule alerts
ISM-1960 Analysing internet-facing network device event logs

Azure Security Benchmark · 3 controls

ASBv3-NS-4 Deploy intrusion detection/intrusion prevention systems (IDS/IPS)
LT-3 Enable logging for security investigation
LT-4 Enable network logging for security investigation

C5 (Germany) · 3 controls

C5-COS-01 Technical safeguards
C5-COS-03 Monitoring of connections in the Cloud Service Provider's network
C5-OPS-13 Logging and Monitoring - Identification of Events

ISO 27001:2022 · 3 controls

8.16 Monitoring activities
8.20 Networks security
8.21 Security of network services

NIST SP 800-172 · 3 controls

3.11.2e Threat Hunting
3.14.2e Monitor Organizational Systems with Specialized Capabilities
3.6.1e Establish Security Operations Center (SOC)

SOC 2 · 3 controls

SOC2-CC4.1 CC4.1 Ongoing and separate evaluations of control (COSO principle 16)
SOC2-CC7.1 CC7.1 Detecting configuration changes and new vulnerabilities
SOC2-CC7.2 CC7.2 Monitoring system components for anomalies

ASIC Cyber Resilience Good Practices · 2 controls

ASIC-CR-DE-1 Continuous monitoring with SIEM
ASIC-CR-RM-2 Fusion centres for real-time monitoring

AWS Well-Architected Security Pillar · 2 controls

SEC04-BP01 Configure service and application logging
SEC05-BP03 Implement inspection-based protection

Belgium CyberFundamentals · 2 controls

BE-CF-12 Network monitoring and defense
BE-CF-17 Continuous monitoring strategy

CISA Industrial Control Systems (ICS) Security Guidance · 2 controls

CISA-ICS-7S-7 Monitor and Respond
CISA-ICS-DID-27 Security Monitoring (IDS/IPS, Logging, SIEM)

Canada ITSG-33 - IT Security Risk Management · 2 controls

ITSG33-RMP-6 Continuous Monitoring
ITSG33-SI System and Information Integrity (SI)

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-IVS-09 Network Defense
CCM-LOG-03 Security Monitoring and Alerting

DORA · 2 controls

DORA-Art.10 Detection
DORA-Art.16 Simplified ICT risk management framework

ISO 22301:2019 · 2 controls

9.1 Monitoring, measurement, analysis and evaluation
9.2.1 General

NIST SP 800-171 Rev 3 · 2 controls

03.13.01 Boundary Protection
03.14.06 System Monitoring

ACSC Essential Eight · 1 control

E8-APP-ML2 Application Control (ML2)

ANSSI Guide d'hygiene informatique (42 mesures, v2.0) · 1 control

ANSSI-HYG-22 Put in Place a Secure Internet Access Gateway

APRA CPS 234 · 1 control

CPS234-30 Detection and Response Mechanisms

ASEAN Data Management Framework · 1 control

ADMF-6.1 Define monitoring and measurement scope

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 1 control

AWWA-4.4 Audit Logging and Monitoring

Australia Consumer Data Right - Banking (CDR) · 1 control

AUCDR-IS-5 Limit, prevent, detect and remove malware

Australia IRAP - Information Security Registered Assessors Program · 1 control

IRAP-OUT-3 Continuous monitoring and reassessment

Australian Energy Sector Cyber Security Framework (AESCSF) · 1 control

AESCSF-SA-1 Logging and monitoring

BIMCO Cyber Security · 1 control

BIMCO-8.1 Detection, logging, blocking and alerts

C2M2 · 1 control

SITUATION-1 Perform Logging and Monitoring

CFTC System Safeguards (17 CFR 37, 38, 39, 49) · 1 control

CFTC-SS-3 Information Security Category

DoD Zero Trust Reference Architecture · 1 control

DODZT-7.1 Log All Traffic

EBA Guidelines on ICT and Security Risk Management (EBA/GL/2019/04) · 1 control

EBA-GL-3.4.5 Security monitoring

EIOPA Guidelines on ICT Security and Governance (EIOPA-BoS-20/600) · 1 control

EIOPA-ICTSG-GL.11 Security monitoring

ISO/IEC 42001:2023 · 1 control

9.1 Monitoring, measurement, analysis and evaluation

NIS2 Directive · 1 control

Art.21.2.b Incident handling

NIST SP 800-161 Rev 1 · 1 control

161R1-SI-4 System Monitoring

NIST SP 800-61 Rev. 3 · 1 control

DE.CM-01 DE.CM-01 Networks and network services monitored, including rogue networks

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.