+INF.13.A21 Logging in TBM (S)

INF.13.A21 Logging in TBM (S)

Events that have been appropriately classified in event management SHOULD be logged. In addition, events relevant to the security of the systems at hand SHOULD be logged.

All attempts to access configurations and all instances of manual and automated control access SHOULD be logged. Depending on the level of protection required, full logging (including metadata and the content of changes) SHOULD take place.

Logging SHOULD be consolidated on a central logging instance.

Logging data SHOULD ONLY be transmitted using secure communication channels.

In case of security-critical events, alarms SHOULD be raised automatically.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.37 Repudiation of Actions