+IND.1.A10 Monitoring, Logging, and Detection [OT Operations] (S)

IND.1.A10 Monitoring, Logging, and Detection [OT Operations] (S)

Operational and security-relevant events SHOULD be identified promptly. For this purpose, a suitable approach to log and event management SHOULD be developed and implemented. Log and event management SHOULD include adequate measures to detect and record security-relevant events. It SHOULD also include a security incident response plan.

The response plan SHOULD define procedures for handling security incidents. This plan SHOULD cover the classification of events, reporting channels and the definition of the organisational units to be involved, response plans to limit damage, the analysis and restoration of systems and services, and the documentation of and follow-up process for incidents.

1. Áttekintés

1.1 Hivatkozások

1.2 Azonosított követelmények

1.3 Kapcsolódó szabályozások

2. Azonosított követelmények

Követelmények

3. Kapcsolódó szabályozások

Szabályozások

Kapcsolt feladatok

Kapcsolatok
blocks G 0.32 Misuse of Authorisation
blocks G 0.37 Repudiation of Actions
blocks G 0.39 Malware
blocks G 0.41 Sabotage