DE.AE-03 Information is correlated from multiple sources

Statement

Information is correlated from multiple sources

Guidance

Constantly transfer log data generated by other sources to a relatively small number of log servers

Guidance

Use event correlation technology (e.g., SIEM) to collect information captured by multiple sources

Guidance

Utilize cyber threat intelligence to help correlate events among log sources

1. Forbhreathnú

1.1 Tagairtí

• 4.3 Crisis management

1.2 Ceanglais aitheanta

1.3 Rialacháin ghaolmhara

2. Ceanglais aitheanta

3. Rialacháin ghaolmhara

Saincheisteanna nasctha

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final