Incident Response

3 control(s) in this category.

Control	Title	Severity	Type
389-IRM-001	Enable logging for all security incidents involving directory services.	high	detective
389-IRM-002	Integrate logs with a SIEM for event correlation and monitoring.	high	preventive
389-IRM-003	Monitor for signs of account compromise (unusual login locations/times).	high	preventive