Log Analysis

Operate log analysis per NIST SP 800-92 Chapter 5 (Operational Processes) + Section 5.12 (Performing Log Analysis). Correlation and detection rules per Section 5.12.1: implement correlation rules combining signals across sources (authentication + endpoint + ne...

Emerging internal and external threat intelligence is combined with correlated log analysis to predict future attacks.

CSF 2.0 outcome: information on adverse events is provided to authorized staff and tools. Priority High. R1: generate alerts and provide them to cybersecurity and incident response tools and staff (for example the SOC and incident responders).

Advanced control principles for threat monitoring and analysis (required, with baseline and intermediate, of an AI whose inherent risk is high). Threat intelligence sources covering every part of the threat profile are prioritised and monitored;

The incident management log is the running record of everything done in handling an event or incident: each assessment, decision, escalation, action, communication and change, logged by the point of contact and the response team as it happens for later analysi...

Configuration standards covering every server, network device and system component, virtual images, snapshots and the hypervisor included, consistent with industry-accepted hardening standards.