Security Event
What is Security Event?
An observable occurrence in a system or network that may have security implications, such as a failed login attempt or configuration change.
Terms that appear alongside security event
Each of these is named in at least one of the same controls as security event. The number is how many controls name both.
- integrity 9 shared controls
- audit 7 shared controls
- event logging 7 shared controls
- information security 6 shared controls
- vulnerability 4 shared controls
- incident response 4 shared controls
- patch management 3 shared controls
- access control 3 shared controls
Frameworks that govern security event
What the standards actually require on security event
Requirements naming security event across 6 standards, quoted from the control text.
Event logs from workstations are analysed in a timely manner to detect cyber security events. Required at Maturity Level Three of the Application control mitigation strategy (Appendix C);
acsc-essential-eight::E8-APP-ISM-0109 · Application control (ISM-0109): Event logs from workstations are analysed in a timely manner to detect cyber security events →Cyber security events are analysed in a timely manner to identify cyber security incidents.
ISM-1228 · Analysing cyber security events for incidents →Each information security event is to be assessed and a decision made on whether it counts as an information security incident. Purpose: categorize and prioritize security events effectively.
iso-27002-2022::5.25 · Assessment and decision on information security events →Conforming implementations handle the security events the part defines, hold the required cryptographic material, generate random numbers from an approved source, and use the object identifiers the part assigns.
iec-62351-power-systems-communication-security::9:6 · Part 9, clause 6: normative key management requirements (security events, required cryptographic material, random number generation, object identifiers) →Each information security event is to be assessed and a decision made on whether it counts as an information security incident. Purpose (stated in ISO/IEC 27002:2022): ensures information security events are categorized and prioritized effectively.
iso-27001-2022::5.25 · Assessment and decision on information security events →Security events are evaluated to decide whether they could cause, or have caused, a failure to meet objectives, and if so action is taken to prevent or address the failure.
SOC2-CC7.3 · CC7.3 Evaluating security events to identify incidents →Questions people ask about security event
What is Security Event?
Why is Security Event important for compliance?
Which compliance frameworks address Security Event?
Where can I learn more about Security Event?
See how Security Event applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.