simpl.
로그인
사이버보안 GRC 14개 항목

Logging, Monitoring & Detection Audit

이 체크리스트는 영어로 제공됩니다.

Audits security logging, centralized monitoring, and detection capabilities to ensure events are captured, protected, and reviewed.

NIST 800-53ISO 27001:2022PCI DSS 4.0SOC 2

무료 PDF 또는 Word · 이메일을 입력하면 다운로드할 수 있습니다.

Log Generation & Coverage

  • Are audit logs generated for security-relevant events across systems and applications? *
  • Do logs capture user identity, event type, timestamp, source, and outcome? *
  • Is all privileged and administrative activity logged? *
  • Are logs generated for authentication successes and failures? *

Centralization & Time Synchronization

  • Are logs aggregated to a centralized SIEM or log management platform? *
  • Are system clocks synchronized to an authoritative time source? *
  • Are logs protected from unauthorized modification or deletion? *

Retention

  • Are audit logs retained for at least twelve months, with 90 days readily available? *
  • Is the log retention period defined and enforced by policy? *
  • What is the configured log retention period in days?

Review, Alerting & Detection

  • Are logs reviewed regularly (automated or manual) for anomalies? *
  • Are detection rules and alerts configured for suspicious or malicious activity? *
  • Are alerts routed to responders with defined response procedures? *
  • Are file integrity monitoring alerts generated for critical system files? *

Logging, Monitoring & Detection Audit 체크리스트 전체 다운로드

인쇄하기 좋은 PDF 또는 편집 가능한 Word 문서로 무료로 받으세요.