+IND.1.A10 Monitoring, Logging, and Detection [OT Operations] (S)

IND.1.A10 Monitoring, Logging, and Detection [OT Operations] (S)

Operational and security-relevant events SHOULD be identified promptly. For this purpose, a suitable approach to log and event management SHOULD be developed and implemented. Log and event management SHOULD include adequate measures to detect and record security-relevant events. It SHOULD also include a security incident response plan.

The response plan SHOULD define procedures for handling security incidents. This plan SHOULD cover the classification of events, reporting channels and the definition of the organisational units to be involved, response plans to limit damage, the analysis and restoration of systems and services, and the documentation of and follow-up process for incidents.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
blocks G 0.32 Misuse of Authorisation
blocks G 0.37 Repudiation of Actions
blocks G 0.39 Malware
blocks G 0.41 Sabotage