Security Monitoring
What is Security Monitoring?
The continuous observation and analysis of an organization's IT environment to detect security events, threats, and anomalies in real time.
Terms that appear alongside security monitoring
Each of these is named in at least one of the same controls as security monitoring. The number is how many controls name both.
- cloud security 8 shared controls
- incident response 7 shared controls
- nist 5 shared controls
- audit 5 shared controls
- integrity 5 shared controls
- threat intelligence 5 shared controls
- log management 5 shared controls
- soar 5 shared controls
Frameworks that govern security monitoring
What the standards actually require on security monitoring
Requirements naming security monitoring across 6 standards, quoted from the control text.
Private providers support the environment needed for public bodies' security monitoring of the cloud service and for linking with the government security monitoring system to detect cyber attacks and threats against the public area.
south-korea-cloud-security-assurance-program-csap::14.3.2 · Supporting security monitoring →Premises are to be watched continuously for unauthorized physical entry. Purpose: detect and discourage unauthorized physical access.
iso-27002-2022::7.4 · Physical security monitoring →The designated CII owner must implement security monitoring and a response process for timely detection of cybersecurity incidents targeting the infrastructure.
ghana-cybersecurity-act::CIID.5.2f · Directive 5.2(f): security monitoring and response for timely detection →The incident response plan must include monitoring of, and response to, alerts from security monitoring systems, covering at least: IDS and IPS (intrusion detection and prevention); network security controls; mechanisms detecting changes to critical files;
12.10.5 · 12.10.5 Plan covers alerts from security monitoring systems →Security monitoring practices are implemented at the network or infrastructure, application and transaction layers so the DSP can scan its environment for threats and act on anomalies; monitoring is a joint responsibility of the ATO and the DSP.
ato-digital-service-provider-dsp-operational-security-framework::SEC.MONITOR · Security monitoring at network, application and transaction layers →System owners continuously monitor the security of each system, and manage associated cyber threats, security risks and controls.
ISM-1526 · Continuous security monitoring by system owners →Questions people ask about security monitoring
What is Security Monitoring?
Why is Security Monitoring important for compliance?
Which compliance frameworks address Security Monitoring?
Where can I learn more about Security Monitoring?
See how Security Monitoring applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.