--- names: full: "Google Logging Log Metric Filter and Alerts for Project Ownership Assignments Changes do not exist" contextual: "Log Metric Filter and Alerts for Project Ownership Assignments Changes do not exist" description: "In order to prevent unnecessary project ownership assignments to users/service-accounts \ and further misuses of projects and resources, all roles/Owner assignments should be monitored. " type: COMPLIANCE_POLICY categories: - "SECURITY" frameworkMappings: - /frameworks/cis-gcp-v3.0.0/02/04 - /frameworks/cloudaware/logging-and-monitoring/alerting-and-notification - /frameworks/nist-sp-800-53-r5/au/12 - /frameworks/nist-sp-800-53-r5/au/02 - /frameworks/nist-sp-800-53-r5/au/07 - /frameworks/pci-dss-v4.0/10/02/01 - /frameworks/pci-dss-v4.0/10/02/01/01 - /frameworks/pci-dss-v4.0/10/02/01/02 - /frameworks/pci-dss-v4.0/10/02/01/03 - /frameworks/pci-dss-v4.0/10/02/01/04 - /frameworks/pci-dss-v4.0/10/02/01/05 - /frameworks/pci-dss-v4.0/10/02/01/06 - /frameworks/pci-dss-v4.0/10/02/01/07 - /frameworks/pci-dss-v4.0/10/02/02 - /frameworks/pci-dss-v4.0/05/03/04 - /frameworks/pci-dss-v4.0/06/04/01 - /frameworks/pci-dss-v4.0/06/04/02 - /frameworks/iso-iec-27001-2022/08/15 - /frameworks/iso-iec-27001-2022/08/20 - /frameworks/nist-csf-v1.1/de-ae/03 - /frameworks/nist-csf-v1.1/pr-pt/01 similarPolicies: cloudConformity: - url: "https://www.trendmicro.com/cloudoneconformity-staging/knowledge-base/gcp/CloudLogging/enable-ownership-assignments-monitoring.html" name: "Enable Project Ownership Assignments Monitoring"