NIST CSF 2.0 · derived mapping target
DE.AE-02Adverse events analyzed
Analyze potentially harmful events to understand the activity behind them, so you can tell a genuine threat from a false alarm.
Mapping at a glance
DE.AE-02Adverse events analyzedNIST CSF 2.0
DE.AE-02 is covered by 12 Sekit CSF controls. +7 more in the table below. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0199SIEM use cases · PolicyRCF-0200SIEM use cases · ProcessRCF-0201SIEM use cases · TechnicalRCF-0202Alerting & triage · PolicyRCF-0203Alerting & triage · ProcessRCF-0204Alerting & triage · TechnicalRCF-0205UEBA/behavior analytics · PolicyRCF-0206UEBA/behavior analytics · ProcessRCF-0207UEBA/behavior analytics · TechnicalRCF-0211Detection engineering · PolicyRCF-0212Detection engineering · ProcessRCF-0213Detection engineering · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
ISO/IEC 42001:2023 — Annex A counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Logging and monitoring configuration
How the company collects and keeps activity logs from its systems, and how security alerts are generated and handled.
Zero Trust and advanced detection
The advanced network-security and detection approaches: Zero Trust access (never trust by default), behavior analytics (UEBA), and custom detection engineering.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves DE.AE-02?”
Also via MCP, free with account