Central Bank of Jordan Cloud Computing Guideline (2018)
2.8 and 2.9: Access management and monitoring of security events and logs – Central Bank of Jordan Cloud Computing Guideline (2018)

Central Bank of Jordan Cloud Computing Guideline (2018) 2.9: Monitor security events and retain unrestricted access to the provider's log files

What does 2.9 require?

The company makes sure adequate detection mechanisms exist in the provider's network, systems and applications to analyse activity that could undermine how secure and stable the assigned service is, and secures unrestricted authority to reach the log files held by the provider. It provides what is needed to monitor and analyse the logs of the assigned services automatically; reviews event logs continually according to event importance and documents the process; reviews, audits and keeps access records so that only authorised users reach data; and obtains the security event logs of every assigned service.

Maintained by Gerard Blokdyk

Other controls in 2.8 and 2.9: Access management and monitoring of security events and logs – Central Bank of Jordan Cloud Computing Guideline (2018)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Central Bank of Jordan Cloud Computing Guideline (2018) controls