Skip to content

Extended Detection and Response

What is Extended Detection and Response?

An integrated security platform that correlates data across multiple security layers including endpoints, network, cloud, and email for comprehensive threat detection.

Information Security

Frameworks that govern extended detection and response

CSA CCM v4View framework →ISO 27001:2022View framework →CIS Controls v8View framework →

What the standards actually require on extended detection and response

Requirements naming extended detection and response across 3 standards, quoted from the control text.

DoD Zero Trust Reference Architecture1 control

Deploy EDR and integrate into XDR for detection and response across the environment.

DODZT-2.7 · Endpoint and Extended Detection and Response →
Japan FSA Cybersecurity Guidelines for Financial Institutions1 control

Continuous security monitoring + 24x7 SOC operations are expected per FSA Cybersecurity Guidelines particularly for Tier 2/3 institutions. (1) SOC Operating Models: (a) Internal SOC - dedicated team + tooling;

JP-FSA-CYB-Security-Monitoring-SOC-Operations-SIEM-EDR-MDR-XDR-24x7-Detection-Alert-Triage · Japan FSA Cybersecurity Security Monitoring + SOC 24x7 Operations + SIEM + EDR + MDR + XDR + Detection + Alert Triage + Threat Hunting + Incident Response Integration + Threat Intelligence Integration + UEBA →
Lloyd's Minimum Standards - Cyber Security1 control

Lloyds MS11.7 Threat Detection and Security Monitoring - 24/7/365 Security Operations Centre (SOC) capability internal or via Managed Security Service Provider (MSSP) + Security Information and Event Management (SIEM) covering identity + network + endpoint + c...

LLOYDS-MS11-Threat-Detection-Security-Monitoring-Email-Phishing-Defences-MS11-7-12-SOC-EDR-XDR-SIEM · Lloyds MS11 Threat Detection + Security Monitoring + Email + Phishing + MS11.7-12 →

Questions people ask about extended detection and response

What is Extended Detection and Response?
An integrated security platform that correlates data across multiple security layers including endpoints, network, cloud, and email for comprehensive threat detection.
Why is Extended Detection and Response important for compliance?
Extended Detection and Response is a key concept in Information Security. Understanding extended detection and response helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Extended Detection and Response?
Extended Detection and Response appears in the requirement text of DoD Zero Trust Reference Architecture, Japan FSA Cybersecurity Guidelines for Financial Institutions, Lloyd's Minimum Standards - Cyber Security. Across these standards we have identified 3 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Extended Detection and Response?
Explore our compliance framework pages to see how extended detection and response applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Extended Detection and Response applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.