IT Examiner School - Oct 2023

Internal Use Only

Event Logging Event logging provides audit trails and feedback to evaluate & gauge the effectiveness of controls The success of logging depends on what is logged, log filter capabilities & key personnel under-standing what the information means Institutions should have systems for detecting irregular or suspicious activity Security Incident & Event Monitoring (SIEM)

• Aggregation • Correlation • Log integrity • Rulesets • Alerting • Forensics

49

Internal Use Only

Encryption

Data in Transit

Data at Rest

Data in Use

50