A centralised event logging facility is implemented and event logs are sent to the facility as soon as possible after they occur.
Topic
Centralised event logging facility
Applicable to
all
History
Priority
must
Dec 2022
A centralised event logging facility is implemented and event logs are sent to the facility as soon as possible after they occur.
Centralised event logging language associated with an existing control was amended to provide clarity of intent [ISM-1405]. This included the introduction of a new control [ISM-1815].
Mar 2022
A centralised event logging facility is implemented and systems are configured to save event logs to the facility as soon as possible after each event occurs.
Miscellaneous changes were made to rationale and recommendations throughout the publication to clarify content without changing intent. This included a review from the Guidelines for System Hardening chapter through to the Guidelines for Data Transfers chapter.
2015
Agencies must implement a secure centralised logging facility.