Linux virtual machines should have the network traffic data collection agent installed

NIST SP 800-53 Rev 5

• AU-6 Audit Record Review, Analysis, and Reporting
• AU-6(4) Central Review And Analysis
• AU-6(5) Central Review And Analysis
• AU-12 Audit Record Generation
• AU-12(1) System-Wide And Time-Correlated Audit Trial

NIST Cybersecurity Framework v2.0

• DE.CM-03

NIST SP 800-171 Rev 2

• 3.3.1: Create and retain system audit logs and records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity
• 3.3.2 Ensure that the actions of individual system users can be uniquely traced to those users, so they can be held accountable for their actions
• 3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks
• 3.14.7: Identify unauthorized use of organizational systems.

RBI IT Framework for NBFCs

• 3.1.g Trails
• 4.2 IT Operations
• 4.4.b IT Operations

FedRAMP High

• AU-6 Audit Record Review, Analysis And Reporting
• AU-6(4) Central Review And Analysis
• AU-6(5) Integration / Scanning And Monitoring Capabilities
• AU-12 Audit Generation
• AU-12(1) System-Wide / Time-Correlated Audit Trail

HIPAA HITRUST v9.2

• 0836.09.n2Organizational.1-09.n 09.06 Network Security Management
• 0885.09n2Organizational.3-09.n 09.06 Network Security Management