graphgrc

SCF - MON-02 - Centralized Collection of Security Event Logs

Mechanisms exist to utilize a Security Incident Event Manager (SIEM) or similar automated tool, to support the centralized collection of security-related event logs.

Mapped framework controls

ISO 27002

• A.8.15

NIST 800-53

• AU-2
• AU-6
• SI-4

SOC 2

• CC7.2
• CC7.3

Control questions

Does the organization utilize a Security Incident Event Manager (SIEM) or similar automated tool, to support the centralized collection of security-related event logs?

This site is open source. Improve this page.