Event Logging
What is Event Logging?
The systematic recording of security-relevant events and activities across systems and applications for monitoring, analysis, and compliance purposes.
Terms that appear alongside event logging
Each of these is named in at least one of the same controls as event logging. The number is how many controls name both.
- audit 8 shared controls
- security event 7 shared controls
- accountability 4 shared controls
- policy 3 shared controls
- vulnerability 3 shared controls
- access management 3 shared controls
- integrity 3 shared controls
- patch management 2 shared controls
Frameworks that govern event logging
What the standards actually require on event logging
Requirements naming event logging across 6 standards, quoted from the control text.
Event logs sent to a centralised event logging facility are encrypted in transit.
ISM-1984 · Event logs sent to a centralised event logging facility are encrypted in transit. →Standardized generation and monitoring of cyber security event logs in power systems
62351-14 · Cyber security event logging →Audit event logging and storage. Control from BSI IT-Grundschutz framework, domain: BSI IT-Grundschutz: Audit & Accountability.
BSI-28 · Audit event logging and storage →Audit event logging and storage. Implements CyFun PR.PT-1: audit and log records are determined, documented, implemented and retained in accordance with policy.
BE-CF-28 · Audit event logging and storage →Identify event types selected for logging including FedRAMP minimum list; review and update at least annually.
AU-2 · Event Logging →Identify event types selected for logging including FedRAMP minimum list; review and update at least annually.
AU-2 · Event Logging →Questions people ask about event logging
What is Event Logging?
Why is Event Logging important for compliance?
Which compliance frameworks address Event Logging?
Where can I learn more about Event Logging?
See how Event Logging applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.