CSA cloud security monitoring

archimatev1

/01 Views

Architecture landscapearchimate
Governance and deliveryarchimate
Delivery and assurancearchimate

/02 About

Unify identity, workload and infrastructure telemetry with detection, case management and automated response

Purpose: Unify identity, workload and infrastructure telemetry with detection, case management and automated response. Reading the diagrams: Architecture landscape contains the complete semantic model. Governance and delivery isolates organizational decisions and enabling services. Delivery and assurance isolates runtime capabilities, controls, stewardship and evidence. Adoption: this is a reference architecture, not proof of implementation or regulatory compliance. Replace generic roles with actual owners and solutions. Record decisions, scope, constraints, interfaces, data classification, implementation status and evidence. Verify all applicable policies and control objectives against the current official source. Source and attribution: original Arq interpretation informed by https://cloudsecurityalliance.org/artifacts/security-guidance-v5/. No official source artwork is reproduced, and no endorsement or certification by the source publisher is implied.

Published by Lattix · 12 elements · 13 relationships · validated on publish

/03 Contents

Application
Protected workloads, Identity plane
Application Component
Network sensors, Cloud audit sources, Telemetry pipeline, Detection correlation, Threat intelligence, Alert prioritization, Response orchestration
Data Store
Event storage, Forensic evidence
Process
Investigation and triage