Sekit CSF · Logging & Monitoring · Policy
RCF-0205UEBA/behavior analytics
The company formally deploys behavioural analysis to identify anomalous activity that rules-based detection misses
Mapping at a glance
RCF-0205UEBA/behavior analyticsLogging & Monitoring · Policy
RCF-0205 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.1Policies for information securitysupportsSekit's UEBA/behavior analytics policy is part of A.5.1's topic-specific policy layer: it records the deliberate decision on whether anomaly detection is in scope, what it watches and who acts on it.A.8.16Monitoring activitiesenablesDeciding deliberately what behavioral analysis should watch and who acts on it is the scoping decision that makes A.8.16's anomaly monitoring workable rather than noise.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
DE.AE-02Adverse events analyzedDE.AE-07Threat intelligence integratedDE.CM-06External provider activity monitored
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Zero Trust and advanced detection
The advanced network-security and detection approaches: Zero Trust access (never trust by default), behavior analytics (UEBA), and custom detection engineering.
From the Sekit evidence catalog
This topic through the other lenses
All Logging & Monitoring controls
Ask Sekura: “What evidence proves RCF-0205?”
Also via MCP, free with account