Activity Logging and Monitoring

Activity logging and monitoring will help assess policy compliance, identify intrusions and breaches, and support an effective response program. The degree of logging and monitoring is risk-driven and increases with data accessibility sensitivity.

Activity Monitoring

Systems and databases should log and monitor user activity performed. The scope and level of audit logging and analysis activity will depend on the sensitivity of and risk associated with the particular data or system, and should be expanded whenever there is an indication of increased risk to assets.