Security Log
What is Security Log?
A record of security-relevant events generated by operating systems, applications, and network devices for monitoring and audit purposes.
Terms that appear alongside security log
Each of these is named in at least one of the same controls as security log. The number is how many controls name both.
- log management 3 shared controls
- incident response 2 shared controls
- policy 2 shared controls
Frameworks that govern security log
What the standards actually require on security log
Requirements naming security log across 6 standards, quoted from the control text.
Where a special condition produces security logs, operators retain the logs extracted from the aircraft network, using the transfer methods, retention times and tools the design approval holder specifies, analyse them continuously or on schedule for anomalies...
faa-aircraft-systems-information-security-protection-asisp::ANSP.14-15 · ANSP.14-15 Security logs, surveillance and event reporting →Aggregate security logs in Microsoft Sentinel or equivalent SIEM with documented detection rules and analyst workflows.
LT-5 · Centralize security log management and analysis →Tools actively monitor security logs for anomalies and alert within set parameters.
ffiec-cybersecurity-assessment-tool-cat::D3.DC.An.Int.3 · D3.DC.An.Int.3 Anomalous Activity Detection (Intermediate 3) →Management educates users on their security roles and responsibilities through acceptable use policies, holds all employees, officers and contractors accountable for compliance with sanctions available, keeps training current on endpoint security, log-in and p...
ffiec-it-examination-handbook::IS-II.C.7(e) · II.C.7(e) Training (Information Security) →A private body may process data for a purpose other than that of collection only where needed to avert dangers to the security of the state or the public, to pursue crimes, or to establish, exercise or defend legal claims, and in each case only if the data sub...
germany-federal-data-protection-act-bdsg::s24 · s 24 Private bodies reuse data for another purpose only for security, prosecution or legal claims →Intermediate control principles for anomalies activity detection (required, with baseline, of an AI whose inherent risk is medium). Audit logs are backed up to a central log server or media so they cannot be altered (in 2.0 with security logs of key systems an...
hkma-cyber-resilience-assessment-framework-c-raf::4.2.I · 4.2 Anomalies activity detection: intermediate level →Questions people ask about security log
What is Security Log?
Why is Security Log important for compliance?
Which compliance frameworks address Security Log?
Where can I learn more about Security Log?
See how Security Log applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.