CRISC: Certified in Risk and Information Systems Control

Security monitoring controls should be selected and tailored to be commensurate with the relevant risk and organizational risk tolerance. Log correlation, automated analysis tools, and analysis resources can improve operation of the control, but they are secondary design considerations after establishing the risk-appropriate level of control.