KSI-MLA-LET Logging Event Types

A list of information resources and event types that will be logged, monitored, and audited is maintained and persistently reviewed to ensure these activities occur.

NIST SP 800-53 Rev. 5 controls: AC-17(1), AC-2(4), AC-20(1), AC-6(9), AU-10, AU-12, AU-2, AU-7, AU-7(1), CM-5(1), IR-9(4), SI-4(19), SI-4(20), SI-4(4), SI-4(5), SI-7(7)

Defined terms: Information Resource, Persistently

1. Yleiskatsaus

1.1 Viittaukset

• AC-17(01) Monitoring and Control
• AC-02(04) Automated Audit Actions
• AC-20(01) Limits on Authorized Use
• AC-06(09) Log Use of Privileged Functions
• AU-10 Non-repudiation
• AU-12 Audit Record Generation
• AU-02 Event Logging
• AU-07 Audit Record Reduction and Report Generation
• AU-07(01) Automatic Processing
• CM-05(01) Automated Access Enforcement and Audit Records
• IR-09(04) Exposure to Unauthorized Personnel
• SI-04(19) Risk for Individuals
• SI-04(20) Privileged Users
• SI-04(04) Inbound and Outbound Communications Traffic
• SI-04(05) System-generated Alerts
• SI-07(07) Integration of Detection and Response
• FRD-IRS Information Resource
• FRD-PER Persistently

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

3. Liittyvät säädökset

• FedRAMP Consolidated Rules -

  EN: FedRAMP® Consolidated Rules of the Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, from their machine-readable version (FedRAMP/rules). Works of the U.S. Government are not subject to copyright protection in the United States (17 U.S.C. § 105; GSA website policies); GSA dedicated its machine-readable FedRAMP content to the public domain worldwide (CC0 1.0). FedRAMP® is a registered trademark of GSA; GRCA is not affiliated with, nor endorsed by, GSA or FedRAMP. Divided into sections and converted into the GRCA format, the wording unchanged, linked to the NIST SP 800-53 controls they name. Only the version published by FedRAMP is authoritative.

  DE: FedRAMP® Consolidated Rules des Federal Risk and Authorization Management Program, U.S. General Services Administration (GSA), https://www.fedramp.gov/, aus ihrer maschinenlesbaren Fassung (FedRAMP/rules). Werke der US-Regierung sind in den USA urheberrechtlich nicht geschützt (17 U.S.C. § 105; Website-Richtlinien der GSA); die GSA hat ihre maschinenlesbaren FedRAMP-Inhalte weltweit gemeinfrei gestellt (CC0 1.0). FedRAMP® ist eine eingetragene Marke der GSA; GRCA steht in keiner Verbindung zur GSA oder zu FedRAMP und wird von ihnen nicht unterstützt. In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert, mit den genannten Controls aus NIST SP 800-53 verknüpft. Maßgeblich ist allein die von FedRAMP veröffentlichte Fassung.