+OPS.1.1.7.A22 Integration of System Management into Automated Detection Systems (S)

OPS.1.1.7.A22 Integration of System Management into Automated Detection Systems (S)

The logging of security-relevant events in system management SHOULD be integrated into a security information and event management (SIEM). The events to be forwarded to the SIEM SHOULD be comprehensibly defined.

The requirements catalogue for selecting a system management solution SHOULD specify the necessary interfaces and transfer formats.

A system management solution SHOULD be monitored in an automated manner by a security vulnerability detection system.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.15 Eavesdropping
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems