cm/controlmapping
Sources
NIST CSF 2.0 · Detect (DE)
DE.AE-07

Cyber threat intelligence and other contextual information are integrated into the analysis

frameworkNIST Cybersecurity Framework 2.0 sectionDetect (DE) topicsThreat Intelligence frameworks4 2 2 5

Wrong or missing mapping? Report it

Equivalents of DE.AE-07 in other frameworks
FrameworkRequirementTitleLinkSource / reason
ISO 27001A.5.7Threat intelligenceCrosswalkSame topic: Threat Intelligence
CIS v8.1—No requirementNo mapping in our dataNo mapping in our data (most CIS links are editorial: CIS's published crosswalk covers 49 of 153 safeguards).
SOC 2—No requirementNo mapping in our dataNo mapping in our data (SOC 2 links are editorial only).
PCI DSS6.3.1Vulnerabilities identified and risk-rankedCrosswalkSame topic: Threat Intelligence
3 loosely related (not mappings)
6.4.3 Payment page scripts authorised and integrity-checked Loosely related
Only shares CSF DE.AE-07: related, not a mapping
12.3.4 Hardware and software technologies reviewed annually Loosely related
Only shares CSF DE.AE-07: related, not a mapping
12.5.1 Inventory of in-scope system components Loosely related
Only shares CSF DE.AE-07: related, not a mapping
CMMCSI.L2-3.14.3Security Alerts & AdvisoriesCrosswalkSame topic: Threat Intelligence
1 loosely related (not mappings)
RA.L2-3.11.1 Risk Assessments Loosely related
Only shares CSF DE.AE-07: related, not a mapping
800-53PM-15PM-16SI-5Security and Privacy Groups and Associations; Threat Awareness Program…CrosswalkSame topic: Threat Intelligence
2 loosely related (not mappings)
RA-3 Risk Assessment Loosely related
Only shares CSF DE.AE-07: related, not a mapping
RA-10 Threat Hunting Loosely related
Only shares CSF DE.AE-07: related, not a mapping
HIPAA§164.308(a)(1)(ii)(A)§164.308(a)(1)(ii)(B)§164.316(a)Risk Analysis; Risk Management…Loosely relatedNo mapping. Only shares CSF DE.AE-07: related, not a mapping
GDPR—No requirementNo mapping in our dataNo mapping in our data (only GDPR's security articles are mapped, editorially).
NIS24.3Crisis managementLoosely relatedNo mapping. Only shares CSF DE.AE-07: related, not a mapping
Essential Eight—No requirementNo mapping in our dataNo mapping in our data (Essential Eight links are editorial only).
DORAArt.8(2)Art.13(1)Art.45(1)Identification; Learning and evolving…EditorialSame topic: Threat Intelligence (editorial pick)
CPS 234Para 17Keep capability current as threats and vulnerabilities changeEditorialSame topic: Threat Intelligence (editorial pick)
Cyber Essentials—No requirementNo mapping in our dataNo mapping in our data (Cyber Essentials covers five technical controls only).

Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · Loosely related only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.