View a markdown version of this page

MIDASEC07-BP01 Deploy continuous monitoring tools - Modern Industrial Data Technology Lens
Implementation guidanceResources

MIDASEC07-BP01 Deploy continuous monitoring tools

Implement continuous monitoring of your industrial systems to detect and respond to threats in real time. Monitoring should span cloud, edge, and on-premises systems across both IT and OT environments.

Desired outcome: Security teams can detect anomalies and threats early, reducing the impact of potential breaches.

Benefits of establishing this best practice: Enables real-time visibility, faster incident response, and proactive threat mitigation.

Level of risk exposed if this best practice is not established: High

Implementation guidance

Use AWS monitoring tools such as Amazon CloudWatch, AWS IoT Device Defender, and AWS Config to gather and analyze telemetry.

Implementation steps

  • Enable Amazon CloudWatch metrics and logs for all AWS workloads.

  • Deploy AWS IoT Device Defender to monitor device behavior and audit configurations.

  • Use AWS Config to track configuration changes across resources.

  • Integrate alerts with AWS SNS or AWS Security Hub CSPM for real-time response.

Resources