ComplianceNIST 800-53 enhancement

NIST-SA-15(13) Logging Syntax

Official page ↗

Framework: NIST SP 800-53 rev5 (5.2.0)
Family: SA System and Services Acquisition
Control: SA-15(13)

Control statement

Require the developer of the system, system component, or system service to use [Assignment: secure logging format(s)] to log [Assignment: events types to log] at [Assignment: level of detail to log].

Discussion

In support of better incident response and the ability to more quickly reconstruct security-related actions, identifying specific requirements for secure logging facilitates the ability to connect application-produced audit event logs with operational data. Event types are consistent with the event types defined in [AU-02](#au-2).

Enhancement of · Compliance (1)

NIST-SA-15 Development Process, Standards, and Tools NIST 800-53 control

Related control · Compliance (5)

NIST-AU-2 Event Logging NIST 800-53 control
NIST-AU-3 Content of Audit Records NIST 800-53 control
NIST-IR-4 Incident Handling NIST 800-53 control
NIST-IR-8 Incident Response Plan NIST 800-53 control
NIST-SA-5 System Documentation NIST 800-53 control