+OPS.1.1.7.A15 Status Monitoring, Logging, and Alerting of Relevant Events in the System Management Solution and the Systems to be Managed (S)

OPS.1.1.7.A15 Status Monitoring, Logging, and Alerting of Relevant Events in the System Management Solution and the Systems to be Managed (S)

The basic performance and availability parameters of a system management solution and the systems to be managed SHOULD be continuously monitored. For this purpose, the respective threshold values SHOULD be determined in advance (baselining). If defined threshold values are exceeded, the responsible personnel SHOULD be notified automatically.

For better error analysis, information from the status monitoring of other areas (e.g. from a separate “Networks” area) SHOULD also be considered to find the exact cause of disruptions.

Important events on systems to be managed and on the system management solution SHOULD be automatically transmitted to a central logging infrastructure and logged there (see OPS.1.1.5 Logging).

Important events SHOULD be defined for the following aspects at minimum:

  • Failure or inaccessibility of systems to be managed
  • Failure or inaccessibility of system management components
  • Hardware malfunctions
  • Login attempts on the system management solution
  • Login attempts on systems to be managed
  • Critical states or overload of the system management solution
  • Critical states or overloads of systems to be managed

Event messages and logging data SHOULD be transmitted to a central logging system. Alarm messages SHOULD be transmitted as soon as they occur.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.37 Repudiation of Actions