OPS-13.02B

The SIEM system is deployed within the cloud environment or externally and includes the following capabilities:

1. Standardisation of log data;

2. Automated analysis to identify and correlate potential security incidents;

3. Capabilities to detect unusual behaviour and potential threats;

4. Real-time alerting to inform the incident response team of critical events;

5. Reporting to the incident response team in case new information relevant to an event becomes available; and

6. Automated response mechanisms for addressing security incidents.

1. Pārskats

1.1 Atsauces

1.2 Identificētās prasības

1.3 Saistītie tiesību akti

2. Identificētās prasības

3. Saistītie tiesību akti

Saistītie uzdevumi

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)