Japan FSA Cybersecurity Guidelines for Financial Institutions 2.3.4.2-B: 2.3.4.2 Log management: basic actions

Set and regularly review procedures for acquiring, monitoring and retaining logs, covering for example what is logged, scope (hardware, software, services monitored), access control to logs, monitoring method, tamper prevention, retention period and storage method; and check event logs of information systems and operators' work logs regularly or as needed.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in 2.3 Protection against cyberattacks – Japan FSA Cybersecurity Guidelines for Financial Institutions

2.3-B 2.3 Defence in depth: basic actions
2.3.1-B 2.3.1 Authentication and access management: basic actions
2.3.2-B 2.3.2 Education and training: basic actions
2.3.2-D 2.3.2 Education and training: desirable actions
2.3.3-B 2.3.3 Data protection: basic actions
2.3.3-D 2.3.3 Data protection: desirable actions
2.3.4.1-B 2.3.4.1 Hardware and software management: basic actions
2.3.4.1-D 2.3.4.1 Hardware and software management: desirable actions

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Japan FSA Cybersecurity Guidelines for Financial Institutions controls