Control Catalog

SecureOps Control Catalog

Controls designed for continuous runtime enforcement. This catalog represents controls suitable for automated monitoring, detection, and response.

The SecureOps Control Catalog contains controls specifically designed for continuous enforcement. Not all framework controls are suitable for runtime automation — this catalog includes only those where automated monitoring, detection, and response provide meaningful security value.

Enforcement Types

Detect

Monitor and alert on violations

Prevent

Block violating actions

Respond

Take automated remediation actions

Catalog Scope

This catalog represents controls suitable for continuous runtime enforcement. It does not include every control in the framework — many controls require human judgment, periodic assessment, or organizational processes that are not suited to automation.

The catalog is versioned and will evolve as detection capabilities improve and new control patterns emerge. Each control should be evaluated for applicability within the specific engagement scope before implementation.

Evidence & Audit Readiness Back to SecureOps Overview

SecureOps Control Catalog

Enforcement Types

AI Prompt Injection Detection

AI Data Boundary Enforcement

Identity Anomaly Detection

Privileged Access Monitoring

Logging and Monitoring Integrity

Configuration Drift Detection

API Rate and Abuse Detection

Secret Exposure Detection

Cloud Resource Compliance

Data Exfiltration Detection

AI Model Access Control

Session Security Enforcement

Vendor Integration Monitoring

Incident Response Automation

Catalog Scope

SecureOps Control Catalog

Enforcement Types

SO-001AI Prompt Injection DetectionDetect and respond to attempts to manipulate AI system behavior through crafted prompts.

AI Prompt Injection Detection

SO-002AI Data Boundary EnforcementEnsure AI systems do not access, process, or expose data outside defined boundaries.

AI Data Boundary Enforcement

SO-003Identity Anomaly DetectionDetect unusual identity and authentication patterns indicating compromise or abuse.

Identity Anomaly Detection

SO-004Privileged Access MonitoringMonitor all privileged access activities and detect policy violations.

Privileged Access Monitoring

SO-005Logging and Monitoring IntegrityEnsure logging pipelines are operational and logs are not tampered with.

Logging and Monitoring Integrity

SO-006Configuration Drift DetectionDetect unauthorized or unintended changes to security-relevant configurations.

Configuration Drift Detection

SO-007API Rate and Abuse DetectionDetect API abuse patterns including excessive use, scraping, and enumeration.

API Rate and Abuse Detection

SO-008Secret Exposure DetectionDetect exposure of secrets, credentials, and sensitive tokens in code, logs, and outputs.

Secret Exposure Detection

SO-009Cloud Resource ComplianceEnsure cloud resources comply with security baselines and organizational policies.

Cloud Resource Compliance

SO-010Data Exfiltration DetectionDetect unusual data movement patterns indicating potential exfiltration.

Data Exfiltration Detection

SO-011AI Model Access ControlEnforce access controls on AI model inference and training operations.

AI Model Access Control

SO-012Session Security EnforcementEnforce session security policies including timeout, binding, and termination.

Session Security Enforcement

SO-013Vendor Integration MonitoringMonitor third-party and vendor integrations for security policy compliance.

Vendor Integration Monitoring

SO-014Incident Response AutomationAutomate initial incident response actions based on detection classification.

Incident Response Automation

Catalog Scope