NIST SP 1800-32
NIST SP 1800-32: Systems Security

NIST SP 1800-32 NIST1800-32-13: Network security monitoring

Network security monitoring. Control from NIST SP 1800-32 framework, domain: NIST SP 1800-32: Systems Security.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 100 controls across 54 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

  • ASD37-20 Multi-factor authentication (Essential)
  • ASD37-22 Network segmentation (Excellent)
  • ASD37-25 Software firewall - inbound (Very Good)
  • ASD37-29 Host-based IDS/IPS (Very Good)
  • ASD37-32 Network-based IDS/IPS (Limited)
  • CPG-1.D Revoking Credentials for Departing Employees
  • CPG-8.A Network Segmentation
  • CAT-D3-1 Preventative controls
  • CAT-D3-2 Detective controls

FedRAMP High · 2 controls

  • CA-8 Penetration Testing
  • IR-4 Incident Handling

FedRAMP Moderate · 2 controls

  • CA-8 Penetration Testing
  • IR-4 Incident Handling

ISO/IEC 27011:2024 · 2 controls

  • 27011-6.3 Awareness and Training
  • 27011-8.2 Network security and segregation

NIST SP 800-190 · 2 controls

  • OMANCS-5 Network, Endpoint, System Development, and Configuration Security
  • OMANCS-6 Security Monitoring, Detection, Incident Response, and OmanCERT Notification

South Korea ISMS-P · 2 controls

  • ISMSP-AC-04 Network Access Control
  • ISMSP-SYS-03 Security Monitoring and Log Management

API 1164 · 1 control

  • API1164-13 Business Continuity and Recovery
  • AT-DSG-6 Sections 12-13 - Image processing (video surveillance/CCTV)

BSI IT-Grundschutz · 1 control

  • BSI-17 Continuous monitoring strategy
  • FFIEC-06 Network security and segmentation
  • FDBR-Enforcement-AG-CurePeriod Enforcement by Florida Department of Legal Affairs + Penalties + 45-Day Cure (Fla. Stat. 501.72, 501.721, 501.722)
  • ICP-24 Macroprudential Surveillance and Insurance Supervision

IEC 62443 · 1 control

  • IEC62443-13 Network security monitoring
  • ISO28001-PS-01 Facility Security
  • 27006-9.4 Surveillance and recertification

ISO/IEC 27010:2015 · 1 control

  • 27010-13.1 Communications Security

ISO/IEC 27019:2024 · 1 control

  • ISO27019-13 Network security monitoring

ISO/IEC 27043:2015 · 1 control

  • ISO27043-27 Network security management

ISO/IEC 27400:2022 · 1 control

  • 27400-6.5 Security monitoring and incident response

ISO/SAE 21434 · 1 control

  • ISO21434-27 Network security management
  • NIST-CSF-PR.PS-04 Log records are generated and made available for continuous monitoring
  • NISTPF-5 Protect-P Access Control (PR.AC-P)
  • NISTSP61-4 Detection and Analysis: Sources, Triage, Categorisation, Prioritisation

NIST SP 800-63-4 · 1 control

  • NISTSP63R4-5 Federation: Assertions, Trust Agreements, RP Validation, Pseudonymous Identifiers
  • NISTSP82-6 OT Audit, Monitoring, Anomaly Detection, and OT-Specific SOC

NIST SP 800-88 · 1 control

  • NISTSP88-8 Cloud-Resident Data, Hosted Storage, and Scope Boundaries

NIST SP 800-92 · 1 control

  • NISTSP92-3 Log Infrastructure: Architecture, Centralisation, Transport Security, SIEM Governance
  • NZISM-5 Network Security, System Hardening, and Application Security
  • ORANWG11-2 O-RAN Interface Security: E2, A1, O1, O2, Open Fronthaul

OSFI B-13 · 1 control

  • OSFIB13-3 Cyber Security: Identification, Protection, Detection, Response, Recovery

OWASP SAMM · 1 control

  • OWASPSAMM-5 Operations: Incident Management, Environment Management, Operational Management
  • OPENBANK-3 Mutual TLS, Token Binding, Request Signing (JWS), Key Management

OpenSSF Scorecard · 1 control

  • OSSFSC-3 Build, CI/CD Security, Workflow Permissions, Dangerous Patterns

PCI P2PE · 1 control

  • PCI-P2PE-06 Network security and segmentation

PCI PIN Security · 1 control

  • PCI-PIN-06 Network security and segmentation

PCI SSF · 1 control

  • PCI-SSF-06 Network security and segmentation

PSD2 SCA · 1 control

  • PSDTWO-1 Strong Customer Authentication (SCA) Core Requirements

PTES · 1 control

  • PTESPHASE-4 Vulnerability Analysis
  • SHAREASSESS-4 Vulnerability Management, Patching, Application Security

SLSA · 1 control

  • SUPCHAIN-3 Dependency Verification and SBOM
  • TSAPIPE-2 OT/IT Network Segmentation and Access Control
  • UK-TSA-MON-01 Security Monitoring
  • CPSC-CS.1 Network Security for Connected Products
  • US-SEC-DA-SC-03 ETF Framework

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in NIST SP 1800-32: Systems Security

Query this from an agent

The graph holds this control, the 100 it maps to, and the evidence behind each claim, over MCP and REST.