IAM-01.01AC
Access logs are reviewed at least every month in order to detect attempts of unauthorised access or suspicious access patterns. Supplementary information A review can be carried out manually or via automated manners. In a monthly review, suspicious behaviours like e.g. access failures over a larger time frame (e.g. once a day) or consecutive logins from different countries may show up that a SIEM that only analyses real-time login attemps may overlook.
1. Översikt
1.1 Referenser
1.2 Identifierade krav
1.3 Relaterade regleringar
2. Identifierade krav
3. Relaterade regleringar
Regleringar
| Källa |
Reglering |
Länkade ärenden
|