+SA-15(13) Logging Syntax
|
SA-15(13) Logging Syntax
Control
Require the developer of the system, system component, or system service to use [Assignement: secure logging format(s)] to log [Assignement: events types to log] at [Assignement: level of detail to log].
Discussion
In support of better incident response and the ability to more quickly reconstruct security-related actions, identifying specific requirements for secure logging facilitates the ability to connect application-produced audit event logs with operational data. Event types are consistent with the event types defined in [AU-02](#au-2).
Assessment Objective
Determine if:
the developer of the system, system component, or system service uses [Assignement: secure logging format(s)] to log [Assignement: events types to log] at [Assignement: level of detail to log].
Assessment Method
Examine
System and services acquisition policy;
solicitation documentation;
acquisition documentation;
service level agreements;
acquisition contracts for the system, system component, or system service;
requirements for logging format, event types, and level of detail;
documentation evidence of requirements for logging format, event types, and level of detail;
system security plan; other relevant documents or records.
Interview
Organizational personnel with system and service acquisition responsibilities;
organizational personnel with information security responsibilities;
system developer
1. Übersicht
1.1 Referenzen
1.2 Identifizierte Anforderungen
1.3 Zugehörige Regulierungen
2. Identifizierte Anforderungen
Anforderungen
| Quelle |
Anforderung |
3. Zugehörige Regulierungen
Regulierungen
| Quelle |
Regulierung |
Verknüpfte Vorgänge
|