graphgrc

SCF - MON-02.1 - Correlate Monitoring Information

Automated mechanisms exist to correlate both technical and non-technical information from across the enterprise by a Security Incident Event Manager (SIEM) or similar automated tool, to enhance organization-wide situational awareness.

Mapped framework controls

ISO 27002

NIST 800-53

SOC 2

Control questions

Does the organization use automated mechanisms to correlate both technical and non-technical information from across the enterprise by a Security Incident Event Manager (SIEM) or similar automated tool, to enhance organization-wide situational awareness?