+OPS.1.1.7.A25 Logging and Regulation of System Management Meetings (H)

OPS.1.1.7.A25 Logging and Regulation of System Management Meetings (H)

Session content, particularly user activity on a system management solution and all instances of direct access to systems to be managed, SHOULD be continuously logged and regulated by a technical solution. Command-level activities (i.e. manual and automated commands) SHOULD be monitored and prevented if necessary.

During monitoring, alerts SHOULD be raised not only in the event of specific rule violations, but also in case of anomalies in user behaviour.

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.37 Repudiation of Actions