+OPS.1.1.5.A6 Basic Structure of a Centralised Logging Infrastructure (S)

OPS.1.1.5.A6 Basic Structure of a Centralised Logging Infrastructure (S)

All security-relevant logging data SHOULD be stored in a central location. To this end, a central logging infrastructure (read: a log server system) SHOULD be designed and placed in a network segment created for this purpose (see NET.1.1 Network Architecture and Design).

In addition to security-relevant events (see OPS.1.1.5.A3 Configuring Logging at the System and Network Level), a central logging infrastructure SHOULD log general operational events that indicate errors.

The logging infrastructure SHOULD have sufficient capacity. The possibility of scaling up this infrastructure to support extended logging SHOULD be considered. To this end, sufficient technical, financial, and personnel resources SHOULD be available.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.37 Repudiation of Actions