Flow Analysis
What is Flow Analysis?
The examination of network flow data including source, destination, volume, and timing to identify anomalous patterns and potential security threats.
Frameworks that govern flow analysis
What the standards actually require on flow analysis
Requirements naming flow analysis across 5 standards, quoted from the control text.
Information services and personal information processing across the scope are analysed, business procedures and flows documented (personal information flow tables and diagrams), and reviewed periodically as services and assets change so documents stay current.
south-korea-isms-p::1.2.2 · Status and flow analysis →Detailed table for static analysis: control flow analysis and data flow analysis are HR at SIL 1 to 4; software error effect analysis is R at SIL 1 and 2 and HR at SIL 3 and 4;
en-50716-2023-railway-applications-requirements-for-software-development::A.19 · Table A.19: static analysis →Software units are verified against the unit design and the software safety requirements using the methods of Table 7 (walk-through, pair programming, inspection, semi-formal and formal verification, control flow analysis, data flow analysis, static code analy...
iso-26262-2018-functional-safety-for-road-vehicles::6:9.4 · 9.4 Software unit verification →Key activities: spot and report that an event has happened or the existence of a vulnerability, by personnel or customers or automatically, aided by alerts from security monitoring (intrusion detection and prevention, antivirus, honeypots, log monitoring, secu...
iso-iec-27035-1-2023::5.3 · Detect and report →Security Dimensions 4 and 5 per X.805 Clauses 6.4 and 6.5 are closely related: (1) Data Confidentiality (Dim 4) protects data from unauthorized disclosure - so that anyone without authorization is unable to make sense of the content.
X805-Dim4-5-Data-Confidentiality-Communication-Security-Encryption-Information-Flow-Protection · ITU-T X.805 Security Dimensions 4-5 - Data Confidentiality + Communication Security + Encryption At-Rest + In-Transit + In-Use + Information Flow Protection + Steered Communication + Anti-Tap + Anti-Eavesdrop + Post-Quantum Cryptography →Questions people ask about flow analysis
What is Flow Analysis?
Why is Flow Analysis important for compliance?
Which compliance frameworks address Flow Analysis?
Where can I learn more about Flow Analysis?
See how Flow Analysis applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.