+Event Identification for Logging

Event Identification for Logging

Identify events to be logged, covering logical access, physical access, identity management, capacity management, change management, ICT operation (including system activity), and network traffic activities (including network performance). Determine the level of detail for the logs, aligning with the purpose for which the logs were created and to enable effective detection of anomalous activities. Define retention periods for logs, considering business and security objectives, the purpose of recording logs, and risk assessments.

*Data reporting service providers shall, in addition, have in place systems that can effectively check trade reports for completeness, identify omissions and obvious errors, and request re-transmission of those reports.

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti
EULAW Artikolu 10 1

1.   L-entitajiet finanzjarji għandu jkollhom fis-seħħ mekkaniżmi biex jindividwaw fil-pront attivitajiet anomali, skont l-Artikolu 17, inkluż kwistjonijiet ta’ prestazzjoni tan-netwerk tal-ICT u inċidenti relatati mal-ICT, u biex jidentifikaw il-punti uniċi materjali potenzjali ta’ falliment.

Il-mekkaniżmi ta’ individwazzjoni kollha msemmija fl-ewwel subparagrafu għandhom jiġu ttestjati regolarment f’konformità mal-Artikolu 25.
EULAW Artikolu 10 2

2.   Il-mekkaniżmi ta’ individwazzjoni msemmija fil-paragrafu 1 għandhom jippermettu diversi saffi ta’ kontroll, jiddefinixxu l-limiti ta’ twissija u l-kriterji għall-iskattar u għall-bidu tal-proċessi ta’ rispons għal inċidenti relatati mal-ICT, inkluż mekkaniżmi ta’ twissija awtomatiċi għall-persunal rilevanti responsabbli mir-rispons għal inċidenti relatati mal-ICT.
EULAW Artikolu 10 3

3.   L-entitajiet finanzjarji għandhom jiddedikaw riżorsi u kapaċitajiet suffiċjenti biex jimmonitorjaw l-attività tal-utenti, l-okkorrenza ta’ anomaliji tal-ICT u inċidenti relatati mal-ICT, b’mod partikolari ċ-ċiberattakki.
EULAW Artikolu 10 4

4.   Barra minn hekk, fornituri ta’ servizzi ta’ rappurtar ta’ data, għandu jkollhom fis-seħħ sistemi li jistgħu jivverifikaw b’mod effettiv ir-rapporti kummerċjali għall-kompletezza, jidentifikaw omissjonijiet u żbalji ovvji, u jitolbu ritrażmissjoni ta’ dawk ir-rapporti.