SekitCrosswalk
ENES
Start now
NIST CSF 2.0 · derived mapping target

PR.PS-04Logs generated for monitoring

Generate log records and make them available so you can monitor activity, investigate incidents, and prove what happened. No logs means no visibility.

Mapping at a glance
PR.PS-04Logs generated for monitoringNIST CSF 2.0
RCF-0115Secure SDLC policyApplication Security · PolicyRCF-0116Secure SDLC policyApplication Security · ProcessRCF-0117Secure SDLC policyApplication Security · TechnicalRCF-0121Secure code reviewApplication Security · PolicyRCF-0122Secure code reviewApplication Security · Process

PR.PS-04 is covered by 24 Sekit CSF controls. +19 more in the table below. Open in the full graph →

Mapped from the Sekit CSF

The Sekit controls that cover this requirement, lens by lens.

RCF-0115Secure SDLC policy · PolicyRCF-0116Secure SDLC policy · ProcessRCF-0117Secure SDLC policy · TechnicalRCF-0121Secure code review · PolicyRCF-0122Secure code review · ProcessRCF-0123Secure code review · TechnicalRCF-0124SAST/DAST · PolicyRCF-0125SAST/DAST · ProcessRCF-0126SAST/DAST · TechnicalRCF-0130CI/CD hardening · PolicyRCF-0131CI/CD hardening · ProcessRCF-0132CI/CD hardening · TechnicalRCF-0133IaC scanning · PolicyRCF-0134IaC scanning · ProcessRCF-0135IaC scanning · TechnicalRCF-0136API security · PolicyRCF-0137API security · ProcessRCF-0138API security · TechnicalRCF-0139Container security · PolicyRCF-0140Container security · ProcessRCF-0141Container security · TechnicalRCF-0403Release management · PolicyRCF-0404Release management · ProcessRCF-0405Release management · Technical

ISO/IEC 27001:2022 counterparts

Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.

A.8.25 Secure development life cycleA.8.29 Security testing in development and acceptanceA.8.9 Configuration managementA.5.1 Policies for information securityA.8.32 Change managementA.8.26 Application security requirementsA.8.31 Separation of development, test and production environmentsA.8.16 Monitoring activitiesA.5.15 Access controlA.8.5 Secure authenticationA.8.7 Protection against malwareA.5.8 Information security in project managementA.8.19 Installation of software on operational systemsA.8.28 Secure codingA.8.4 Access to source code

ISO/IEC 42001:2023 — Annex A counterparts

A.6.2.4 AI system verification and validationA.6.2.5 AI system deploymentA.6.2.2 AI system requirements and specificationA.6.1.2 Objectives for responsible development of AI systemA.6.1.3 Processes for responsible design and development of AI systems

Cyber Essentials counterparts

CE3.2 Apply critical updates within 14 daysCE3.1 Use licensed and supported softwareCE2.1 Remove unnecessary accounts and softwareCE5.1 Operate a malware protection mechanismCE5.2 Restrict execution to approved software

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Logging and monitoring configuration
How the company collects and keeps activity logs from its systems, and how security alerts are generated and handled.
Time synchronization configuration
The proof that all systems have their clocks synchronised to a trusted source, which is key for investigating incidents.
From the Sekit evidence catalog

Related controls

Via the shared Sekit CSF topic, not the framework's own index.

DE.CM-01 Networks monitoredPR.AA-05 Access permissions managedPR.PS-01 Configuration management appliedPR.PS-02 Software maintainedPR.PS-03 Hardware maintained
Ask Sekura: “What evidence proves PR.PS-04?”
Also via MCP, free with account