Skip to main content

πŸ’Ό 5.28 Collection of evidence

  • Contextual name: πŸ’Ό 5.28 Collection of evidence
  • ID: /frameworks/iso-iec-27001-2022/05/28
  • Located in: πŸ’Ό 5 Organizational controls

Description​

The organization shall establish and implement procedures for the iden- tification, collection, acquisition and preservation of evidence related to information security events.

Similar​

  • Internal
    • ID: dec-c-8e41f70a

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags

Policies (15)​

PolicyLogic CountFlags
πŸ“ Azure Diagnostic Setting captures Administrative, Alert, Policy, and Security categories 🟒1🟒 x6
πŸ“ Azure Diagnostic Setting for Azure Key Vault is not enabled 🟒🟒 x3
πŸ“ Azure Network Security Group Flow Logs retention period is less than 90 days 🟒1🟒 x6
πŸ“ Azure SQL Server Auditing is not enabled 🟒1🟒 x6
πŸ“ Azure Storage Account Secure Transfer Required is not enabled 🟒1🟒 x6
πŸ“ Azure Storage Blob Logging is not enabled for Read, Write, and Delete requests 🟒1🟒 x6
πŸ“ Azure Storage Queue Logging is not enabled for Read, Write, and Delete requests 🟒1🟒 x6
πŸ“ Azure Subscription Activity Log Alert for Create or Update Network Security Group does not exist 🟒1🟒 x6
πŸ“ Azure Subscription Activity Log Alert for Create or Update Security Solution does not exist 🟒1🟒 x6
πŸ“ Azure Subscription Activity Log Alert for Create or Update SQL Server Firewall Rule does not exist 🟒1🟒 x6
πŸ“ Azure Subscription Activity Log Alert for Create Policy Assignment does not exist 🟒1🟒 x6
πŸ“ Azure Subscription Activity Log Alert for Delete Network Security Group does not exist 🟒1🟒 x6
πŸ“ Azure Subscription Activity Log Alert for Delete Policy Assignment does not exist 🟒1🟒 x6
πŸ“ Azure Subscription Activity Log Alert for Delete Security Solution does not exist 🟒1🟒 x6
πŸ“ Azure Subscription Activity Log Alert for Delete SQL Server Firewall Rule does not exist 🟒1🟒 x6

Internal Rules​

RulePoliciesFlags
βœ‰οΈ dec-x-02eed49a1
βœ‰οΈ dec-x-6fc9c9491
βœ‰οΈ dec-x-20c9ef831
βœ‰οΈ dec-x-36ced3d11
βœ‰οΈ dec-x-611eaa351
βœ‰οΈ dec-x-79579ed71
βœ‰οΈ dec-x-9002886f1
βœ‰οΈ dec-x-a193b20f1
βœ‰οΈ dec-x-b2ce0ca11
βœ‰οΈ dec-x-c397d3ca2
βœ‰οΈ dec-x-d95ea48b1
βœ‰οΈ dec-x-db1b7a1b1
βœ‰οΈ dec-x-dc359e591
βœ‰οΈ dec-x-e5c05d3e1