Compliance Essentials for Splunk

Customers can utilize Splunk to streamline continuous monitoring efforts, improve cybersecurity posture, and address the requirements of different National Institute of Standards and Technology (NIST)-based control frameworks, including the following: Risk Management Framework **(RMF)**, Cybersecurity Maturity Model Certification **(CMMC)**, Defense Federal Acquisition Regulation Supplement **(DFARS)** , the Office of Management **(OMB M-21-31)** MEMORANDUM, the Australian Information Security Manual **(ISM)**, Essential 8 **(E8)**, the Australian Energy Sector Cyber Security Framework **(AES-CSF)**, and NCSC Cyber Assessment Framework **(CAF)**. The app uses the KVStore to store panels for practices and a mapping that maps multiple panels across frameworks. The app references CMMC version 1.0, NIST SP 800-53, Revision 5 for RMF and FISMA, NIST SP 800-171 Revision 2 for DFARS, ISM version March 2023 variant, Essential Eight November 2022 variant.