FFIEC IT Examination Handbook
Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

FFIEC IT Examination Handbook AIO-VI.B.7: VI.B.7 Log Management (Architecture, Infrastructure, and Operations)

Management uses logs to identify, track, analyse and resolve operational problems, records occurrences, anomalies, usage and activity across operating systems, applications, network devices and security systems, balances the volume collected against storage and analytic capacity, identifies and dispositions false positives and tunes logging parameters, and maintains policies, standards and procedures that set the objectives for logging, the types of logs collected, controls restricting access to log settings, response times for review, retention and storage, escalation and the further elements the booklet lists.

Maintained by Gerard BlokdykControl text last updated

Other controls in Architecture, Infrastructure, and Operations booklet (June 2021) – FFIEC IT Examination Handbook

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.