UnixTime

Research Note

Monitoring Detection Use Case Register

  • Updated Jun 17, 2026
  • Read 01 min read
  • Status reviewed

Use this register to translate risks and threat scenarios into concrete monitoring rules, alerts, thresholds, and response actions.

On this page

When to use this

Use this register to translate risks and threat scenarios into concrete monitoring rules, alerts, thresholds, and response actions.

Detection use cases

Use case ID Risk scenario Asset/service Behaviour to detect Data source Rule/query Threshold Severity Triage owner Escalation path Review date
MON-001 TBD TBD TBD TBD TBD TBD TBD TBD TBD TBD

Minimum checks

  • Use case traces to a risk scenario or critical service.
  • Required data source is available and onboarded.
  • Threshold is defined and justified.
  • Triage owner is assigned.
  • Escalation path is defined.
  • Rule has been tested or reviewed.
  • Template
  • Iso27001
  • Technological controls
  • Monitoring
  • Detection

Note Metadata

Aliases: Detection Use Case Register

Source: 90 Templates/Monitoring Detection Use Case Register.md