Essentials for cloud
DET-05 Detection capability efficacy
Your ability to spot attacks has to keep up as your cloud setup changes. Review your detection coverage from time to time. Look for gaps opened by new cloud services, new integrations or changes to how your services fit together.
Reviewed 18 October 2026 · Current to ASD's Essentials for cloud, published 15 October 2026
The principle
Cyber security event detection capabilities are regularly evaluated for effectiveness and continuously refined, including by using current strategic and sector-specific cyber threat intelligence, to improve the detection of cyber security events.
The action
ASD's actions are quoted as published in Essentials for cloud. ASD has not given them IDs, so they are numbered by position. The letters show who does the work for each service model; our cloud guide explains them.
- C: Customer
- S: Supplied
- P: Provider-inherited
Action 1 of 1
Review detection coverage periodically to identify gaps arising from new cloud services, integrations or architectural changes.
In plain English: Periodically review what your detection covers. Look for gaps caused by new cloud services, integrations or changes to how your services fit together.
- Domains
- Visibility and response
- Who does it
- PaaSCustomer
- SaaSCustomer
See all 30 principles in Essentials for cloud, or read our cloud guide.
Sources
The ASD publications this page quotes.
Quoted ASD material © Commonwealth of Australia 2026, licensed under CC BY 4.0.
Everything else on this page is written by Control Stack.