graphgrc

SCF - MON-01.2 - Automated Tools for Real-Time Analysis

Mechanisms exist to utilize a Security Incident Event Manager (SIEM), or similar automated tool, to support near real-time analysis and incident escalation.

Mapped framework controls

ISO 27002

NIST 800-53

SOC 2

Control questions

Does the organization utilize a Security Incident Event Manager (SIEM), or similar automated tool, to support near real-time analysis and incident escalation?