+INF.13.A21 Logging in TBM (S)

INF.13.A21 Logging in TBM (S)

Events that have been appropriately classified in event management SHOULD be logged. In addition, events relevant to the security of the systems at hand SHOULD be logged.

All attempts to access configurations and all instances of manual and automated control access SHOULD be logged. Depending on the level of protection required, full logging (including metadata and the content of changes) SHOULD take place.

Logging SHOULD be consolidated on a central logging instance.

Logging data SHOULD ONLY be transmitted using secure communication channels.

In case of security-critical events, alarms SHOULD be raised automatically.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.37 Repudiation of Actions