Sekit CSF · Logging & Monitoring · Process

RCF-0206UEBA/behavior analytics

Behavioural baselines are consistently maintained and anomalous deviations are investigated

Mapping at a glance

RCF-0206UEBA/behavior analyticsLogging & Monitoring · Process

A.8.16Monitoring activitiesISO/IEC 27001:2022 DE.AE-02Adverse events analyzedNIST CSF 2.0 DE.AE-07Threat intelligence integratedNIST CSF 2.0 DE.CM-06External provider activity monitoredNIST CSF 2.0

RCF-0206 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.16Monitoring activitiessupportsKeeping behavioral baselines current and investigating flagged deviations is the ongoing work that makes A.8.16's anomaly-based monitoring effective rather than theoretical.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

DE.AE-02Adverse events analyzed DE.AE-07Threat intelligence integrated DE.CM-06External provider activity monitored

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Zero Trust and advanced detection

The advanced network-security and detection approaches: Zero Trust access (never trust by default), behavior analytics (UEBA), and custom detection engineering.

From the Sekit evidence catalog

This topic through the other lenses

All Logging & Monitoring controls

Ask Sekura: “What evidence proves RCF-0206?”

Also via MCP, free with account