Logging & Monitoring Procedure

This procedure defines how your organisation generates, protects, reviews and retains logs of user activities, exceptions, faults and information security events, and how it monitors networks, systems and applications for anomalous or malicious activity, in accordance with Annex A controls 8.15 (Logging), 8.16 (Monitoring activities) and 8.17 (Clock synchronization) of ISO/IEC 27001:2022.

What's Inside

• Responsibilities
• What is Logged
• Log Content
• Centralization and Protection of Logs
• Log Retention
• Clock Synchronization (Annex A 8.17)
• Monitoring Activities (Annex A 8.16)
• Alert Triage and Escalation

ISO 27001 Alignment

Supports ISO/IEC 27001:2022 requirements, including Annex A controls 8.15, 8.16 and 8.17. It fits with the rest of the QEHS Vault ISO 27001 document set.

Format

Supplied as a fully editable Microsoft Word (.docx) file. Add your organisation’s name, logo and details, then use it straight away. Instant download after purchase.