8.15
Logging
Generate, store, protect, and analyze logs that record activities, exceptions, faults, and other relevant events.
-
6.6.3.1 Organizations shall ensure an appropriate understanding of their security logging capabilities and needs and ensure a corresponding log management policy is in place.
NOTE: NIST SP 800-92, “Guide to Computer Security Log Management” describes considerations for Security Log Management and includes examples. Understanding what data is available and what is missing
is a key step in defining a good log management and incident. -
-