+INF.13.A21 Logging in TBM (S)

INF.13.A21 Logging in TBM (S)

Events that have been appropriately classified in event management SHOULD be logged. In addition, events relevant to the security of the systems at hand SHOULD be logged.

All attempts to access configurations and all instances of manual and automated control access SHOULD be logged. Depending on the level of protection required, full logging (including metadata and the content of changes) SHOULD take place.

Logging SHOULD be consolidated on a central logging instance.

Logging data SHOULD ONLY be transmitted using secure communication channels.

In case of security-critical events, alarms SHOULD be raised automatically.

1. Преглед

1.1 Препратки

1.2 Идентифицирани изисквания

1.3 Свързани регулации

2. Идентифицирани изисквания

Изисквания

3. Свързани регулации

Регулации

Свързани задачи

Връзки
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.37 Repudiation of Actions