💼 67d logging and alerting of access to sensitive data or unsuccessful logon attempts to identify potential unauthorised access;
- Contextual name: 💼 67d logging and alerting of access to sensitive data or unsuccessful logon attempts to identify potential unauthorised access;
- ID:
/frameworks/apra-cpg-234/26/67/d - Located in: 💼 67 Detection mechanisms typically include scanning, sensing and logging mechanisms which can be used to identify potential information security incidents. Monitoring processes could include the identification of unusual patterns of behaviour and logging that facilitates investigation and preserves forensic evidence. The strength and nature of monitoring controls would typically be commensurate with the impact of an information security incident. Monitoring processes would consider the broad set of events, ranging from the physical hardware layer to higher order business activities such as payments and changes to user access.
Description
Empty...
Similar
- Internal
- ID:
dec-c-0b2a0869
- ID:
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|
Policies (2)
| Policy | Logic Count | Flags |
|---|---|---|
| 📝 AWS API Gateway API Access Logging in CloudWatch is not enabled 🟢 | 1 | 🟠 x1, 🟢 x5 |
| 📝 AWS EKS Cluster Logging is not enabled for all control plane logs types 🟢 | 1 | 🟢 x6 |
Internal Rules
| Rule | Policies | Flags |
|---|---|---|
| ✉️ dec-x-8ccccedc | 1 | |
| ✉️ dec-x-d75f6d86 | 1 |