Skip to content

Security Telemetry

What is Security Telemetry?

Data collected from security tools, systems, and sensors that provides visibility into the security state of an organization's IT environment.

Information Security

Frameworks that govern security telemetry

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on security telemetry

Requirements naming security telemetry across 2 standards, quoted from the control text.

AWS Well-Architected Security Pillar1 control

Aggregate security telemetry into standardised destinations such as S3 log archive buckets, Security Hub and a centralised SIEM so analysts and automation can correlate across sources.

SEC04-BP02 · Capture logs, findings, and metrics in standardized locations →
OWASP DevSecOps Maturity Model (DSOMM)1 control

Per OWASP DSOMM Information Gathering dimension and operational monitoring: implement observability + detection + response. Requirements include (a) collect security telemetry from application + infrastructure + identity + access layers + (b) implement runtime...

DSOMM-5 · Information Gathering, Logging, Monitoring, and Incident Response →

Questions people ask about security telemetry

What is Security Telemetry?
Data collected from security tools, systems, and sensors that provides visibility into the security state of an organization's IT environment.
Why is Security Telemetry important for compliance?
Security Telemetry is a key concept in Information Security. Understanding security telemetry helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Security Telemetry?
Security Telemetry appears in the requirement text of AWS Well-Architected Security Pillar, OWASP DevSecOps Maturity Model (DSOMM). Across these standards we have identified 2 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Security Telemetry?
Explore our compliance framework pages to see how security telemetry applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Security Telemetry applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.