MON-17
Event Log Analysis & Triage
Description
Mechanisms exist to ensure event log reviews include analysis and triage practices that integrate with the organization's established incident response processes.
Control Question
Does the organization ensure event log reviews include analysis and triage practices that integrate with its established incident response processes?
Control Metadata
Domain:
Continuous Monitoring
Validation Cadence:
Annual