Back to catalog
MON-02.2MONContinuous Monitoring
Central Review & Analysis
Description
Automated mechanisms exist to centrally collect, review and analyze audit records from multiple sources.
Cross-Mappings
85 paths across 3 frameworks
Cross-Mappings
NIST 800-531 mapping
AU-6(4)
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
CCI2 mappings
CCI-000154
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
CCI-003821
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
STIG57 mappings
SV-203613r958428_ruleThe operating system must provide the capability to centrally review and analyze audit records from multiple components within the system.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 3 · disa_xccdf · related
SV-205473r960918_ruleThe Mainframe Product must provide the capability to centrally review and analyze audit records from multiple components within the system.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 3 · disa_xccdf · related
SV-206455r960918_ruleThe Central Log Server must be configured to perform analysis of log records across multiple devices and hosts in the enclave that can be reviewed by authorized individuals.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 3 · disa_xccdf · related
SV-206874r382879_ruleThe IDPS must provide log information in a format that can be extracted and used by centralized analysis tools.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 3 · disa_xccdf · related
SV-207360r958428_ruleThe VMM must support the capability to centrally review and analyze audit records from multiple components within the system.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 2 · disa_xccdf · related
SV-214346r985884_ruleAn Apache web server that is part of a web server cluster must route all remote management through a centrally managed access control point.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 3 · disa_xccdf · related
SV-221209r960918_ruleExchange Queue monitoring must be configured with threshold and action.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · V2R6 · disa_xccdf · related
SV-222480r985972_ruleThe application must provide centralized management and configuration of the content to be captured in audit records generated by all application components.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 6 · disa_xccdf · related
SV-222487r960918_ruleThe application must provide the capability to centrally review and analyze audit records from multiple components within the system.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · 6 · disa_xccdf · related
SV-228363r879572_ruleExchange Queue monitoring must be configured with threshold and action.
1.00
- Secure Controls Framework · 2026.2 · scf_strm · equivalent
- DISA · 2025-01-23 · disa_cci_list · equivalent
- DISA · V2R6 · disa_xccdf · related
+47 more (top 10 by confidence shown)
Control mappings provided by the Secure Controls Framework (SCF).
SCF
Powered by the Secure Controls Framework
The control catalog, cross-mappings, and STRM relationship data shown here are provided by the Secure Controls Framework (SCF), 2026.2. Every mapping is credited to SCF as the methodology, with the SCF reference and version stored alongside it.
© SCF Council, LLC. Secure Controls Framework content is free and shown here with attribution. securecontrolsframework.com · About SCF on STIGViewer