Subscriptions should have a contact email address for security issues

NIST SP 800-53 Rev 5

• IR-4 Incident Handling
• IR-5 Incident Monitoring
• IR-6(2) Vulnerabilities Related to Incidents
• SI-4(12) Automated Organization-Generated Alerts

NIST Cybersecurity Framework v2.0

• DE.AE-02: Potentially adverse events are analyzed to better understand associated activities.
• RC.CO-03
• RS.MA-01

FedRAMP Moderate Baseline Rev 4

• IR-4 Incident Handling
• IR-5 Incident Monitoring

NIST SP 800-171 Rev 2

• 3.6.2 Track, document, and report incidents to designated officials and/or authorities both internal and external to the organization
• 3.14.3 Monitor system security alerts and advisories and take action in response
• 3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks

RBI IT Framework for NBFCs

• 1 IT Governance
• 3.1.c Role based Access Control
• 3.1.f Maker-checker

CMMC 2.0 Level 2

• IR.L2-3.6.2 Track, document, and report incidents to designated officials and/or authorities both internal and external to the organization
• SI.L2-3.14.3 Monitor system security alerts and advisories and take action in response
• SI.L2-3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks

FedRAMP High

• IR-4 Incident Handling
• IR-5 Incident Monitoring