DE.AE-03 Information is correlated from multiple sources

Statement

Information is correlated from multiple sources

Guidance

Constantly transfer log data generated by other sources to a relatively small number of log servers

Guidance

Use event correlation technology (e.g., SIEM) to collect information captured by multiple sources

Guidance

Utilize cyber threat intelligence to help correlate events among log sources

1. Overview

1.1 References

• 4.3 Crisis management

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final