Law / Frameworks / NIST CSF 2.0 / Detect
NIST CSF 2.0, DetectDE.AE-07
Cyber threat intelligence and other contextual information are integrated into the analysisNIST Cybersecurity Framework, version 2.0, February 2024 (NIST CSWP 29), DE.AE-07
We read each law below as bearing on this control. That does not mean the control, done well, meets the law: what each law asks is on its own page. Law library as of .
- 1
- law
- 1
- jurisdiction
- 0
- with court rulings behind them
- 0
- not yet in force
Sector security regimes
1 law, 1 jurisdiction| Jurisdiction | Law | What it asks, as read here |
|---|---|---|
 New York |
DFS Guidance: Measures Regulated Entities Should Consider in a Heightened Cybersecurity Threat Environment |
The Department says you should consider confirming that intrusion prevention, detection and response controls are in use, up-to-date and appropriately deployed; that log and security event alerting data is captured and anomalous or suspicious activity is promptly identified and appropriately actioned; that appropriate personnel review and act on relevant threat intelligence, including known indicators of compromise and complete remediation steps; and that all personnel are alerted to the steps they can take against ongoing cyber threat campaigns, including social engineering. |
Full text of the NIST Cybersecurity Framework, public domain (a US government work). Every control of the framework.