Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)
5.8: Operations security – Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)

Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1) 5.8.3: Put in place processes to collect and keep configuration and audit evidence

What does 5.8.3 require?

Processes and procedures gather and retain audit logs, activity reports, system configuration copies, change reports and other test outputs, with the provider supplying this information as needed according to the service model.

Maintained by Gerard Blokdyk

Other controls in 5.8: Operations security – Hong Kong Government Practice Guide for Cloud Computing Security (ISPG-SM04 v2.1)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.