+DER.1.A6 Continuous Monitoring and Analysis of Log Data (S)

DER.1.A6 Continuous Monitoring and Analysis of Log Data (S)

All log data SHOULD be actively monitored and analysed as constantly as possible. Employees SHOULD be made responsible for these activities.

If the employees responsible have to actively search for security-relevant events that have occurred (e.g. when testing or monitoring IT systems), such tasks SHOULD be documented in corresponding process instructions.

Sufficient personnel resources SHOULD be made available for detecting security-relevant events.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.22 Manipulation of Information
blocks G 0.25 Failure of Devices or Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.27 Lack of Resources
blocks G 0.29 Violations of Laws or Regulations