Event Logging
What is Event Logging?
The systematic recording of security-relevant events and activities across systems and applications for monitoring, analysis, and compliance purposes.
Terms that appear alongside event logging
Each of these is named in at least one of the same controls as event logging. The number is how many controls name both.
- audit 8 shared controls
- security event 7 shared controls
- accountability 4 shared controls
- policy 3 shared controls
- vulnerability 3 shared controls
- access management 3 shared controls
- integrity 3 shared controls
- patch management 2 shared controls
Frameworks that govern event logging
What the standards actually require on event logging
Requirements naming event logging across 6 standards, quoted from the control text.
PowerShell script block logs are protected by Protected Event Logging functionality.
ISM-1624 · Protected Event Logging for script block logs →Identify the event types the system can log (authentication, file use, user and group management, events sufficient to establish what occurred, its source and outcome, and operational transactions such as NCIC and III), coordinate event logging with the other...
fbi-cjis-security-policy::AU-2 · AU-2 Event Logging →Audit event logging and storage. Implements CyFun PR.PT-1: audit and log records are determined, documented, implemented and retained in accordance with policy.
BE-CF-28 · Audit event logging and storage →The organisation identifies the event types the system can log to support auditing, coordinates event logging with other entities that need audit information, specifies the subset of events to log with the frequency or situation for each, records why those eve...
canada-itsp-10-033-security-and-privacy-controls-and-assurance-activities-catalogue::AU-02 · AU-02 Event logging →Identify event types selected for logging including FedRAMP minimum list; review and update at least annually.
AU-2 · Event Logging →Identify event types selected for logging including FedRAMP minimum list; review and update at least annually.
AU-2 · Event Logging →Questions people ask about event logging
What is Event Logging?
Why is Event Logging important for compliance?
Which compliance frameworks address Event Logging?
Where can I learn more about Event Logging?
See how Event Logging applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.