+SA-15(13) Logging Syntax
|
SA-15(13) Logging Syntax
Control
Require the developer of the system, system component, or system service to use [Assignement: secure logging format(s)] to log [Assignement: events types to log] at [Assignement: level of detail to log].
Discussion
In support of better incident response and the ability to more quickly reconstruct security-related actions, identifying specific requirements for secure logging facilitates the ability to connect application-produced audit event logs with operational data. Event types are consistent with the event types defined in [AU-02](#au-2).
Assessment Objective
Determine if:
the developer of the system, system component, or system service uses [Assignement: secure logging format(s)] to log [Assignement: events types to log] at [Assignement: level of detail to log].
Assessment Method
Examine
System and services acquisition policy;
solicitation documentation;
acquisition documentation;
service level agreements;
acquisition contracts for the system, system component, or system service;
requirements for logging format, event types, and level of detail;
documentation evidence of requirements for logging format, event types, and level of detail;
system security plan; other relevant documents or records.
Interview
Organizational personnel with system and service acquisition responsibilities;
organizational personnel with information security responsibilities;
system developer
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|