How Security Onion's network monitoring supports specific requirements in NERC CIP and PCI DSS. Security Onion is source-available under the Elastic License 2.0, not OSI open source.
Using Security Onion sensors inside electronic security perimeters to meet NERC CIP-015-1: network data feeds, anomaly detection and evaluation, retention of anomalous activity data and protecting monitoring data from tampering.
Meeting PCI DSS requirement 11.5.1 with Suricata sensors in Security Onion at the CDE perimeter and critical points, keeping signatures current, and feeding IDS alerts into the daily log reviews requirement 10.4.1 expects.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.