# Which ISO 27001 controls does network monitoring help with?

Mainly the controls on logging and monitoring activities, and the network security and incident management controls around them. In the 2022 edition of the annex, logging (8.15) asks you to produce, protect and analyse records of activity, and monitoring activities (8.16) asks you to monitor networks, systems and applications for anomalous behaviour and act on it. Network detection evidences both directly. It also supports networks security (8.20), by showing which devices talk across segments, and the incident management controls, by giving a dated starting point for assessing and responding to events and collecting evidence. Asset inventory benefits too, since a network map shows devices that are not in your list. Monitoring does not cover access rights, backups, secure development or supplier contracts, so do not stretch the mapping. In your statement of applicability, name the tool, the segments it covers, who reviews alerts and where records are kept. NetSenX’s network map, alert history and audit log, on every plan, and its PDF compliance reports, from the Starter plan, can serve as that evidence.

FAQ: [Security standards: ISO 27001, SOC 2](https://netsenx.com/en/faq/standards) · https://netsenx.com/en/faq/which-iso-27001-controls-does-network-monitoring-support

## Read next

- https://netsenx.com/en/compliance
- https://netsenx.com/en/security
- https://netsenx.com/en/nis2-readiness

## Related questions

- [Does NetSenX hold ISO 27001 or SOC 2 certification?](https://netsenx.com/en/faq/what-certifications-does-netsenx-hold)
- [What is the NIST Cybersecurity Framework 2.0?](https://netsenx.com/en/faq/what-is-nist-csf-2)
- [What is BSI IT-Grundschutz?](https://netsenx.com/en/faq/what-is-bsi-it-grundschutz)
- [What is the difference between a certification and an attestation report?](https://netsenx.com/en/faq/certification-vs-attestation-what-is-the-difference)
- [How do we prepare for our first ISO 27001 certification audit?](https://netsenx.com/en/faq/how-to-prepare-for-a-first-iso-27001-audit)