+SA-15(13) Logging Syntax
|
SA-15(13) Logging Syntax
Control
Require the developer of the system, system component, or system service to use [Assignement: secure logging format(s)] to log [Assignement: events types to log] at [Assignement: level of detail to log].
Discussion
In support of better incident response and the ability to more quickly reconstruct security-related actions, identifying specific requirements for secure logging facilitates the ability to connect application-produced audit event logs with operational data. Event types are consistent with the event types defined in [AU-02](#au-2).
Assessment Objective
Determine if:
the developer of the system, system component, or system service uses [Assignement: secure logging format(s)] to log [Assignement: events types to log] at [Assignement: level of detail to log].
Assessment Method
Examine
System and services acquisition policy;
solicitation documentation;
acquisition documentation;
service level agreements;
acquisition contracts for the system, system component, or system service;
requirements for logging format, event types, and level of detail;
documentation evidence of requirements for logging format, event types, and level of detail;
system security plan; other relevant documents or records.
Interview
Organizational personnel with system and service acquisition responsibilities;
organizational personnel with information security responsibilities;
system developer
1. Resumen
1.1 Referencias
1.2 Requisitos identificados
1.3 Regulaciones relacionadas
2. Requisitos identificados
Requisitos
| Fuente |
Requisito |
3. Regulaciones relacionadas
Regulaciones
| Fuente |
Regulación |
Incidencias vinculadas
|