Establish and maintain an event and activity logging and monitoring management metrics program.

UCF ID: 02078

Control Type: Process or Activity

Status: Live

Supporting and supported controls

This control directly supports:

Establish and maintain a technical measurement metrics policy. [UCF Control ID 01655]

This control has the following supporting controls:

Report on the percentage of systems for which event and activity logging has been implemented in accordance with policy. [UCF Control ID 02102]

Report on the percentage of systems for which event and activity logs are monitored and reviewed in accordance with policy. [UCF Control ID 02103]

Report on the percentage of systems for which log size and retention duration have been implemented in accordance with policy. [UCF Control ID 02104]

Report on the percentage of systems that generate warnings about anomalous or potentially unauthorized activity. [UCF Control ID 02105]

Authority documents complied with:

CISWG Information Security Program Elements, January 10,2005, ISPE22

US Federal Security Guidance

The organization must establish and maintain an event and activity logging and monitoring metrics management program [ISPE22, CISWG Information Security Program Elements, January 10,2005]