Privileged account and group management event logs are stored centrally.
Topic
Privileged access to systems
Applicable to
all
History
Dec 2023
Removed
The existing control relating to the centralised storage of privileged account and group management event logs was merged into the existing control relating to collecting privileged account and group management event logs. [ISM-1650, ISM-1652]
Dec 2022
Privileged account and group management event logs are stored centrally.
Existing controls relating to event logging were amended to increase clarity of intent and to reduce duplication of content. As a result, common guidance was consolidated into the event logging and monitoring section of the Guidelines for System Monitoring.