Jeremy Pickett 1/14/25 Jeremy Pickett 1/14/25

DE.AE-5: Anomalies and Events

Incident alert thresholds are established.

Jeremy Pickett 1/13/25 Jeremy Pickett 1/13/25

DE.AE-4: Anomalies and Events

Impact of events is determined.

Jeremy Pickett 1/10/25 Jeremy Pickett 1/10/25

Event data are collected and correlated from multiple sources and sensors.

Jeremy Pickett 1/9/25 Jeremy Pickett 1/9/25

Detected events are analyzed to understand attack targets and methods.

Jeremy Pickett 1/8/25 Jeremy Pickett 1/8/25

A baseline of network operations and expected data flows for users and systems is established and managed.

Jeremy Pickett 1/7/25 Jeremy Pickett 1/7/25

Communications and control networks are protected.