Allowed and blocked application control events are centrally logged.
Topic
Application control
Applicable to
all
History
Dec 2023
Allowed and blocked application control events are centrally logged.
The existing control relating to the centralised storage of application control event logs was merged into the newly merged control relating to collecting application control event logs. [ISM-1660, ISM-1663]
Dec 2023
Allowed and blocked application control events are centrally logged.
The existing controls relating to allowed and blocked application control events being logged where merged together. [ISM-1660, ISM-1661, ISM-1662]
Dec 2022
Allowed and blocked execution events on workstations are logged.
Existing controls relating to event logging were amended to increase clarity of intent and to reduce duplication of content. As a result, common guidance was consolidated into the event logging and monitoring section of the Guidelines for System Monitoring.