+SA-15(13) Logging Syntax
|
SA-15(13) Logging Syntax
Control
Require the developer of the system, system component, or system service to use [Assignement: secure logging format(s)] to log [Assignement: events types to log] at [Assignement: level of detail to log].
Discussion
In support of better incident response and the ability to more quickly reconstruct security-related actions, identifying specific requirements for secure logging facilitates the ability to connect application-produced audit event logs with operational data. Event types are consistent with the event types defined in [AU-02](#au-2).
Assessment Objective
Determine if:
the developer of the system, system component, or system service uses [Assignement: secure logging format(s)] to log [Assignement: events types to log] at [Assignement: level of detail to log].
Assessment Method
Examine
System and services acquisition policy;
solicitation documentation;
acquisition documentation;
service level agreements;
acquisition contracts for the system, system component, or system service;
requirements for logging format, event types, and level of detail;
documentation evidence of requirements for logging format, event types, and level of detail;
system security plan; other relevant documents or records.
Interview
Organizational personnel with system and service acquisition responsibilities;
organizational personnel with information security responsibilities;
system developer
1. Ħarsa ġenerali
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Regolamenti relatati
2. Rekwiżiti identifikati
3. Regolamenti relatati
Regolamenti
| Sors |
Regolamentazzjoni |
Kwistjonijiet marbuta
|