Detect · Foundational tier · Security Operations

DE-02A 24x7 SOC monitors the estate

A security operations centre monitors around the clock, with detection rules maintained and alerts triaged quickly.

Status

Evidence indicates

All 1 item support it and are fresh.

Exposure

High

1 evidence items from 1 sources

CCSA · Detect

Foundational

Not blocking this domain's next tier.

Evidence chain

Every item is read-only, dated, hashed and re-runnable. This is what an examiner can test.

ev-de02-1

Three shifts cover 24x7 with no gaps in 30 days; 218 rules enabled

Splunk Enterprise · telemetry · collected 4 h ago (Oct 15, 2026 · 11:02 UTC) · limit 30 days

Supports

Query: | rest /services/saved/searches | search is_scheduled=1 alert.track=1 | stats count
Identity: token svc-assurance (role assurance_ro, named indexes)
Collector: splunk-collector 3.0.1
Window: 720 h
Records: 218
SHA-256: 902584538e695467ca4170f52d211fae32a672e3ac51711fb97f84cf4cda7fa5