US Executive Order 14144 - Strengthening and Promoting Innovation in the Nation's Cybersecurity
Sec. 3 Improving the cybersecurity of Federal systems – US Executive Order 14144 - Strengthening and Promoting Innovation in the Nation's Cybersecurity

US Executive Order 14144 - Strengthening and Promoting Innovation in the Nation's Cybersecurity 3(c)(ii)(A): Sec. 3(c)(ii)(A) (now 3(a)(ii)(A)) Provide CISA the EDR and SOC data the concept of operations requires

FCEB agencies provide CISA with data from their endpoint detection and response solutions and security operation centers of the completeness and on the timeline the CISA concept of operations requires, either by CISA's direct access to the agency's EDR (with advance notice to the agency) or, for the use cases the concept of operations names, by providing telemetry, so that CISA can hunt for threats and vulnerabilities across the Federal civilian enterprise, identify coordinated campaigns moving laterally between agencies and coordinate Government-wide incident analysis under 44 U.S.C. 3553(b)(7).

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 2 controls across 2 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

  • NIST-CSF-DE.AE-06 Information on adverse events is provided to authorized staff and tools

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Sec. 3 Improving the cybersecurity of Federal systems – US Executive Order 14144 - Strengthening and Promoting Innovation in the Nation's Cybersecurity

Query this from an agent

The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.