DORA · Chapter II: ICT risk management
Art.9(1)
Protection and prevention
frameworkDORA (Regulation (EU) 2022/2554)
sectionChapter II: ICT risk management
csf 2.0DE.CM-01 DE.CM-03 DE.CM-09
topicsCont. Monitoring
frameworks0 10 0
Official textFor the purposes of adequately protecting ICT systems and with a view to organising response measures, financial entities shall continuously monitor and control the security and functioning of ICT systems and tools and shall minimise the impact of ICT risk on ICT systems through the deployment of appropriate ICT security tools, policies and procedures.Regulation (EU) 2022/2554 (DORA), Official Journal of the European Union. © European Union, https://eur-lex.europa.eu (reuse authorised with acknowledgement; only the Official Journal text is authentic)
Wrong or missing mapping? Report it
| Framework | Requirement | Title | Link | Source / reason |
|---|---|---|---|---|
| NIST CSF 2.0 | DE.CM-01DE.CM-03DE.CM-09 | Networks and network services are monitored to find potentially adverse events; Personnel activity and technology usage are monitored to find potentially adverse events… | Editorial | Same topic: Cont. Monitoring (editorial pick) |
| ISO 27001 | A.8.16 | Monitoring activities | Editorial | Same topic: Cont. Monitoring (editorial pick)6 loosely related (not mappings)Clause 9.1 Monitoring, measurement, analysis and evaluation Only shares CSF DE.CM-03: related, not a mapping |
| CIS v8.1 | CIS 13.1CIS 13.6 | Centralize Security Event Alerting; Collect Network Traffic Flow Logs | Editorial | Same topic: Cont. Monitoring (editorial pick)22 loosely related (not mappings)CIS 10.7 Use Behavior-Based Anti-Malware Software Only shares CSF DE.CM-03, DE.CM-09: related, not a mapping CIS 4.9 Configure Trusted DNS Servers on Enterprise Assets Only shares CSF DE.CM-01: related, not a mapping CIS 9.1 Ensure Use of Only Fully Supported Browsers and Email Clients Only shares CSF DE.CM-09: related, not a mapping CIS 9.4 Restrict Unnecessary or Unauthorized Browser and Email Client Extensions Only shares CSF DE.CM-09: related, not a mapping …and 14 more in the downloads |
| SOC 2 | CC7.2 | Monitoring system components for anomalies | Editorial | Same topic: Cont. Monitoring (editorial pick) |
| PCI DSS | 10.4.1 | Security event and critical logs reviewed daily | Editorial | Same topic: Cont. Monitoring (editorial pick)16 loosely related (not mappings)1.2.4 Accurate account-data flow diagram maintained Only shares CSF DE.CM-01: related, not a mapping 5.2.2 Anti-malware detects, removes or contains known malware Only shares CSF DE.CM-09: related, not a mapping 5.3.2 Periodic scans or continuous behavioural analysis Only shares CSF DE.CM-09: related, not a mapping 5.4.1 Mechanisms to detect and protect against phishing Only shares CSF DE.CM-09: related, not a mapping 6.4.2 Automated solution blocks attacks on public web apps Only shares CSF DE.CM-01: related, not a mapping 6.4.3 Payment page scripts authorised and integrity-checked Only shares CSF DE.CM-09: related, not a mapping …and 8 more in the downloads |
| CMMC | SI.L2-3.14.6SI.L2-3.14.7 | Monitor Communications for Attacks; Identify Unauthorized Use | Editorial | Same topic: Cont. Monitoring (editorial pick)18 loosely related (not mappings)CA.L2-3.12.3 Security Control Monitoring Only shares CSF DE.CM-01, DE.CM-03, DE.CM-09: related, not a mapping CM.L2-3.4.9 User-Installed Software Only shares CSF DE.CM-01, DE.CM-03, DE.CM-09: related, not a mapping …and 10 more in the downloads |
| 800-53 | CA-7SI-4 | Continuous Monitoring; System Monitoring | Editorial | Same topic: Cont. Monitoring (editorial pick)21 loosely related (not mappings)…and 13 more in the downloads |
| HIPAA | §164.308(a)(1)(ii)(D) | Information System Activity Review | Editorial | Same topic: Cont. Monitoring (editorial pick)15 loosely related (not mappings)§164.308(a)(3)(ii)(A) Authorization and/or Supervision Only shares CSF DE.CM-01, DE.CM-03, DE.CM-09: related, not a mapping §164.308(a)(4)(ii)(B) Access Authorization Only shares CSF DE.CM-01, DE.CM-03, DE.CM-09: related, not a mapping §164.308(a)(3)(ii)(B) Workforce Clearance Procedure Only shares CSF DE.CM-01, DE.CM-03: related, not a mapping §164.308(a)(4) Information Access Management Only shares CSF DE.CM-01, DE.CM-03: related, not a mapping §164.308(a)(4)(ii)(C) Access Establishment and Modification Only shares CSF DE.CM-01, DE.CM-03: related, not a mapping §164.312(a)(2)(i) Unique User Identification Only shares CSF DE.CM-01, DE.CM-03: related, not a mapping …and 7 more in the downloads |
| GDPR | Art.29Art.32(4) | Processing under the authority of the controller or processor; Security of processing | No mapping. Only shares CSF DE.CM-03: related, not a mapping | |
| NIS2 | 3.2 | Monitoring and logging | Editorial | Same topic: Cont. Monitoring (editorial pick)4 loosely related (not mappings)6.9 Protection against malicious and unauthorised software Only shares CSF DE.CM-01, DE.CM-09: related, not a mapping |
| Essential Eight | ISM-0109ISM-1906ISM-1907 | Event logs from workstations are analysed in a timely manner to detect cyber security…; Event logs from internet-facing servers are analysed in a timely manner to detect cyber…… | Editorial | Same topic: Cont. Monitoring (editorial pick)7 loosely related (not mappings)ISM-0843 Application control is implemented on workstations Only shares CSF DE.CM-09: related, not a mapping ISM-1228 Cyber security events are analysed in a timely manner to identify cyber security incidents Only shares CSF DE.CM-09: related, not a mapping ISM-1488 Microsoft Office macros in files originating from the internet are blocked Only shares CSF DE.CM-09: related, not a mapping ISM-1490 Application control is implemented on internet-facing servers Only shares CSF DE.CM-09: related, not a mapping ISM-1544 Microsoft’s recommended application blocklist is implemented Only shares CSF DE.CM-09: related, not a mapping ISM-1657 Application control restricts the execution of executables, libraries, scripts… Only shares CSF DE.CM-09: related, not a mapping ISM-1870 Application control is applied to user profiles and temporary folders used by operating… Only shares CSF DE.CM-09: related, not a mapping |
| CPS 234 | Para 23 | Detect and respond to incidents in a timely manner | No mapping. Only shares CSF DE.CM-01: related, not a mapping | |
| Cyber Essentials | CE 5 | Malware protection | No mapping. Only shares CSF DE.CM-09: related, not a mapping |
Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.