NIST CSF 2.0 · Detect (DE)
DE.CM-09
Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events
frameworkNIST Cybersecurity Framework 2.0
sectionDetect (DE)
topicsEndpoint Protection, Email Security, Cont. Monitoring, Anomaly Detection
frameworks7 4 2
Wrong or missing mapping? Report it
| Framework | Requirement | Title | Link | Source / reason |
|---|---|---|---|---|
| ISO 27001 | A.5.14A.8.16A.8.19A.8.1A.8.7 | Information transfer; Monitoring activities… | Crosswalk | Same topic: Email Security, Cont. Monitoring, Anomaly Detection, Endpoint Protection1 loosely related (not mappings) |
| CIS v8.1 | CIS 2.5CIS 8.11CIS 10.1CIS 13.1CIS 2.6CIS 2.7CIS 9.1CIS 9.4CIS 9.5CIS 9.6CIS 9.7CIS 10.2CIS 10.3CIS 10.4CIS 10.5CIS 10.6CIS 10.7CIS 13.6 | Allowlist Authorized Software; Conduct Audit Log Reviews… | Crosswalk | Same topic: Endpoint Protection, Anomaly Detection, Cont. Monitoring, Email Security |
| SOC 2 | CC6.8CC7.2 | Preventing or detecting unauthorized or malicious software; Monitoring system components for anomalies | Editorial | Same topic: Endpoint Protection, Email Security, Cont. Monitoring, Anomaly Detection (editorial pick) |
| PCI DSS | 5.2.15.2.25.3.210.4.15.4.110.4.1.1 | Anti-malware deployed on system components; Anti-malware detects, removes or contains known malware… | Crosswalk | Same topic: Endpoint Protection, Cont. Monitoring, Email Security, Anomaly Detection |
| CMMC | SI.L2-3.14.2SI.L2-3.14.6SI.L2-3.14.7SI.L2-3.14.4 | Malicious Code Protection; Monitor Communications for Attacks… | Crosswalk | Same topic: Endpoint Protection, Email Security, Cont. Monitoring, Anomaly Detection8 loosely related (not mappings) |
| 800-53 | AU-6CA-7CM-7(5)SI-3SI-4SI-8 | Audit Record Review, Analysis, and Reporting; Continuous Monitoring… | Crosswalk | Same topic: Anomaly Detection, Cont. Monitoring, Endpoint Protection, Email Security10 loosely related (not mappings)…and 2 more in the downloads |
| HIPAA | §164.308(a)(1)(ii)(D)§164.308(a)(5)(ii)(B) | Information System Activity Review; Protection from Malicious Software | Crosswalk | Same topic: Cont. Monitoring, Endpoint Protection7 loosely related (not mappings)§164.308(a)(3)(ii)(A) Authorization and/or Supervision Only shares CSF DE.CM-09: related, not a mapping §164.312(c)(2) Mechanism to Authenticate Electronic Protected Health Information Only shares CSF DE.CM-09: related, not a mapping |
| GDPR | — | No requirement | No mapping in our data | No mapping in our data (only GDPR's security articles are mapped, editorially). |
| NIS2 | 3.23.46.9 | Monitoring and logging; Event assessment and classification… | Crosswalk | Same topic: Cont. Monitoring, Anomaly Detection, Endpoint Protection, Email Security1 loosely related (not mappings) |
| Essential Eight | ISM-0109ISM-0843ISM-1228ISM-1488ISM-1490ISM-1544ISM-1657ISM-1870ISM-1906ISM-1907 | Event logs from workstations are analysed in a timely manner to detect cyber security…; Application control is implemented on workstations… | Editorial | Same topic: Cont. Monitoring, Endpoint Protection, Anomaly Detection, Email Security (editorial pick) |
| DORA | Art.9(1)Art.10(1)Art.10(3) | Protection and prevention; Detection… | Editorial | Same topic: Cont. Monitoring, Anomaly Detection (editorial pick) |
| CPS 234 | — | No requirement | No mapping in our data | No mapping in our data (CPS 234 is principles-based and its links are editorial). |
| Cyber Essentials | CE 5 | Malware protection | Editorial | Same topic: Endpoint Protection (editorial pick) |
Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.