3.3.8
3.3.8
Protect audit information and audit logging tools from unauthorized access, modification, and deletion.
-
5.5.2.1 Organizations shall implement multi-factor authentication or document all instances where they cannot or make the business decision not to do so.