DE.AE-03 Information is correlated from multiple sources

Statement

Information is correlated from multiple sources

Guidance

Constantly transfer log data generated by other sources to a relatively small number of log servers

Guidance

Use event correlation technology (e.g., SIEM) to collect information captured by multiple sources

Guidance

Utilize cyber threat intelligence to help correlate events among log sources

1. Pārskats

1.1 Atsauces

• 4.3 Crisis management

1.2 Identificētās prasības

1.3 Saistītie tiesību akti

2. Identificētās prasības

3. Saistītie tiesību akti

Saistītie uzdevumi

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final