NIST CSF 2.0 · derived mapping target
DE.CM-06External provider activity monitored
Monitor the activity and services of external providers for adverse events, so risks introduced by third parties are detected, not just trusted away.
Mapping at a glance
DE.CM-06External provider activity monitoredNIST CSF 2.0
DE.CM-06 is covered by 15 Sekit CSF controls. +10 more in the table below. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0103DLP monitoring · PolicyRCF-0104DLP monitoring · ProcessRCF-0105DLP monitoring · TechnicalRCF-0205UEBA/behavior analytics · PolicyRCF-0206UEBA/behavior analytics · ProcessRCF-0207UEBA/behavior analytics · TechnicalRCF-0211Detection engineering · PolicyRCF-0212Detection engineering · ProcessRCF-0213Detection engineering · TechnicalRCF-0214Telemetry coverage · PolicyRCF-0215Telemetry coverage · ProcessRCF-0216Telemetry coverage · TechnicalRCF-0322Ongoing monitoring · PolicyRCF-0323Ongoing monitoring · ProcessRCF-0324Ongoing monitoring · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
ISO/IEC 42001:2023 — Annex A counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Logging and monitoring configuration
How the company collects and keeps activity logs from its systems, and how security alerts are generated and handled.
Vendor due diligence and monitoring
How the company assesses a supplier's security before hiring and monitors it during the relationship, including the process when it ends.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves DE.CM-06?”
Also via MCP, free with account