AU

APP083: Audit Events

By Anonymous User Jan 21, 2021 05:45 PM T-00011 QuickView 1 Replies Print Updated last year by Jeffrey Echanique

Does the application log all security relevant events in accordance with the applicable logging standards outlined in CISS and (Application Event Logging Standards [AELS] or Infrastructure Security Event Logging Standards [ISELS])?

Guidance: The answer should be 'Yes' since to comply with CISS all attempted violations of system security and all significant events relating to security and system administration, financial transactions, and customer information must be audited.

No auditing for the above events listed or for any other security violations.

Replies
  • JE
    By Jeffrey Echanique Jan 26, 2021 01:19 PM T-01056

    All security events are logged. Any modifications to the security policies, roles, permissions or users are logged.

    Here's the log showing changes made to the security policies:

    Here's the log showing changes to a role permission:

    An here's the log showing changes made to a user account:


Please Sign In to submit new tickets or to reply to existing ones.

Ticket ID

T-00011

Created

January 21, 2021 05:45 PM

Product

QuickView