IEEE 1686
Response to cybersecurity events (5.5) – IEEE 1686

IEEE 1686 5.5.2: Event record storage capability and record content

What does 5.5.2 require?

The IED keeps a record of cybersecurity events in storage of a stated capacity, and each record carries the fields the 2013 edition required (its storage capability and storage record subclauses, which Table 1 says are now 5.5.2): (a) an event record number; (b) the time and date; (c) the identification of the user; (d) the event type. Records are retrievable by an authorised user; how and when old records are overwritten is stated by the supplier.

Maintained by Gerard BlokdykControl text last updated

Other controls in Response to cybersecurity events (5.5) – IEEE 1686

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.