Technology Controls Monitoring Accelerator

The Technology Controls Monitoring Accelerator is a collection of pre-defined indicator templates designed to ease collection of data, and aid validation and continuous monitoring of technology controls. This application can be run with the Cybersecurity Controls Accelerator or as a standalone application.

The indicator templates contained in the Technology Controls Monitoring Accelerator are linked to specific ServiceNow® applications to allow compliance validation for standards and frameworks such as:

• ISO/IEC 27001
• ISO/IEC 27002
• CIS Controls

These packaged indicator templates have also been mapped to related common controls in the Unified Compliance Framework (UCF) to enable validation of controls across a wide range of regulations and industry standards. The indicator templates can be used to validate compliance with related control objectives in custom policies. You can monitor controls obtained via the CIS Controls ™ or technology controls common to CIS or ISO 27002, even if you do not subscribe to the CIS Controls. Or you can use the indicators from the Technology Controls Monitoring Accelerator to monitor data coming from UCF.

Continuous monitoring of CIS Controls ™ v8

CIS Controls ™ are a prioritized set of safeguards to mitigate the cyber-attacks against systems and networks. These controls are mapped to and referenced by multiple legal, regulatory, and policy frameworks. CIS Controls ™ v8 has been enhanced to continue supporting the modern systems and software such as cloud-based computing, virtualization, mobility, outsourcing as businesses shift their working model to fully cloud and hybrid environments.

Beginning with the Australia release, Technology Controls Monitoring Accelerator provides pre-packaged CIS v8 controls and indicator templates to monitor them along with its common controls mapped to various standards.

The following enhancements are supported with CIS Controls ™ v8:

• Enable continuous monitoring of CIS Controls ™ v8 using the predefined indicator templates.
• Enable monitoring of common controls from ISO 27002, PCI DSS 4.0, NIST 800-53, NIST CSF, CSA CCM 4.0 mapped to CIS V8.

• Download the Technology Controls Monitoring Accelerator
  Before you run the Technology Controls Monitoring Accelerator application in your instance, you must download it from the ServiceNow Store.
• Ensure that all the appropriate indicator templates are activated
  When you download the GRC: Technology Controls Monitoring Accelerator application, all indicator templates are available, but they are not yet active. Before activating them, you need to ensure that you have the necessary applications activated and can access the tables that are mapped to the indicator templates.
• View your operational status
  View the Operational Status modules for a list of the CIS Controls and technology Controls. Each control also includes the technology used to validate compliance, type of indicator template available, and the control's source table.
• View the Cybersecurity Controls module
  View the Cybersecurity Controls module for a list of the Authority documents, Controls, Control Objectives, and CIS Indicator Templates mapped to specific CIS controls classified by domain, implementation group, and ISO controls.
• Using indicator templates
  Indicators collect data to monitor a single control or risk. Indicator templates allow you to create multiple indicators for similar controls or risks. The Technology Controls Monitoring Accelerator application provides a collection of 171 predefined indicator templates for monitoring cybersecurity controls.
• Indicator templates for controls
  The Technology Controls Monitoring Accelerator includes 273 indicator templates (94 Basic, 174 Manual, and 5 Scripted) for CIS v7 and includes new 67 indicator templates (64 Basic and 3 Scripted) for CIS v8.