Detect
2.4.3 Detection processes
Processes and instructions for detecting cybersecurity incidents are cultivated,
maintained and tested.
Description
Task
DE.DP-1
Define clear roles and responsibilities so that there is no doubt about who is responsible for what,
and who holds what authority.
DE.DP-2
Ensure that detection processes comply with all requirements and conditions.
DE.DP-3
Test your detection processes.
DE.DP-4
Communicate detected incidents to the relevant actors (e.g. suppliers, customers, partners,
authorities, etc.).
DE.DP-5
Improve your detection processes continuously.
Table 31: DE.DP tasks
Standard
Reference
COBIT 5
DSS05.01, APO13.02, APO12.06, APO11.06, DSS04.05
ISA 62443-3:2013
SR 3.3, SR 6.1
ISO 27001:2013
A.6.1.1, A.18.1.4, A.14.2.8, A.16.1.2, A.16.1.6
NIST-SP-800-53 Rev. 4
CA-2, CA-7, PM-14, SI-3, SI-4, AU-6, CA-2, CA-7, RA-5
BSI
M 2.193, M 2.568, B 1.8
Table 32: DE.DP references
Minimum ICT standard 2018
29
Select target paragraph3
Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents