साइबर सुरक्षा GRC 14 आइटम
Logging, Monitoring & Detection Audit
यह चेकलिस्ट अंग्रेज़ी में है।
Audits security logging, centralized monitoring, and detection capabilities to ensure events are captured, protected, and reviewed.
NIST 800-53ISO 27001:2022PCI DSS 4.0SOC 2
मुफ़्त PDF या Word · डाउनलोड करने के लिए अपना ईमेल दर्ज करें।
Log Generation & Coverage
- Are audit logs generated for security-relevant events across systems and applications? *
- Do logs capture user identity, event type, timestamp, source, and outcome? *
- Is all privileged and administrative activity logged? *
- Are logs generated for authentication successes and failures? *
Centralization & Time Synchronization
- Are logs aggregated to a centralized SIEM or log management platform? *
- Are system clocks synchronized to an authoritative time source? *
- Are logs protected from unauthorized modification or deletion? *
Retention
- Are audit logs retained for at least twelve months, with 90 days readily available? *
- Is the log retention period defined and enforced by policy? *
- What is the configured log retention period in days?
Review, Alerting & Detection
- Are logs reviewed regularly (automated or manual) for anomalies? *
- Are detection rules and alerts configured for suspicious or malicious activity? *
- Are alerts routed to responders with defined response procedures? *
- Are file integrity monitoring alerts generated for critical system files? *
पूरी Logging, Monitoring & Detection Audit चेकलिस्ट डाउनलोड करें
इसे साफ़-सुथरे, प्रिंट करने योग्य PDF या संपादन योग्य Word दस्तावेज़ के रूप में मुफ़्त पाएँ।