Skip to main content

💼 Anomalies and Events (DE.AE)

  • Contextual name: 💼 Anomalies and Events (DE.AE)
  • ID: /frameworks/nist-csf-v1.1/de-ae
  • Located in: 💼 NIST CSF v1.1

Description​

Anomalous activity is detected and the potential impact of events is understood.

Similar​

  • Internal
    • ID: dec-b-18b8c0de

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
💼 DE.AE-1: A baseline of network operations and expected data flows for users and systems is established and managed1011
💼 DE.AE-2: Detected events are analyzed to understand attack targets and methods1922
💼 DE.AE-3: Event data are collected and correlated from multiple sources and sensors1922
💼 DE.AE-4: Impact of events is determined1414
💼 DE.AE-5: Incident alert thresholds are established