+OPS.1.1.7.A25 Logging and Regulation of System Management Meetings (H)

OPS.1.1.7.A25 Logging and Regulation of System Management Meetings (H)

Session content, particularly user activity on a system management solution and all instances of direct access to systems to be managed, SHOULD be continuously logged and regulated by a technical solution. Command-level activities (i.e. manual and automated commands) SHOULD be monitored and prevented if necessary.

During monitoring, alerts SHOULD be raised not only in the event of specific rule violations, but also in case of anomalies in user behaviour.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.29 Violations of Laws or Regulations
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.32 Misuse of Authorisation
blocks G 0.37 Repudiation of Actions