DE.AE-03 Information is correlated from multiple sources

Statement

Information is correlated from multiple sources

Guidance

Constantly transfer log data generated by other sources to a relatively small number of log servers

Guidance

Use event correlation technology (e.g., SIEM) to collect information captured by multiple sources

Guidance

Utilize cyber threat intelligence to help correlate events among log sources

1. Apžvalga

1.1 Nuorodos

• 4.3 Crisis management

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

3. Susiję teisės aktai

Susietos užduotys

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final