+OPS.1.2.2.A8 Logging Archival Access [IT Operation Department] (B)

OPS.1.2.2.A8 Logging Archival Access [IT Operation Department] (B)

All attempts to access electronic archives MUST be logged. To this end, dates, times, users, client systems, the actions performed, and any error messages SHOULD be recorded. The archiving concept in question SHOULD specify how long the log data should be retained.

The log data for archive access SHOULD be evaluated regularly. In so doing, the internal specifications of the organisation at hand SHOULD be taken into account.

The specific staff members to whom specific events (e.g. system errors, timeouts, and the copying of records) should be displayed SHOULD also be defined. Critical events SHOULD be evaluated and, if required, escalated immediately once they are detected.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
blocks G 0.14 Interception of Information / Espionage
blocks G 0.22 Manipulation of Information
blocks G 0.29 Violations of Laws or Regulations