Allowed and blocked execution events on non-internet-facing servers are logged.
Topic
Application control
Applicable to
Non Classified, Official, Protected, Secret, Top Secret
History
Dec 2023
Removed
The existing controls relating to allowed and blocked application control events being logged where merged together. [ISM-1660, ISM-1661, ISM-1662]
Dec 2022
Allowed and blocked execution events on non-internet-facing servers are logged.
Existing controls relating to event logging were amended to increase clarity of intent and to reduce duplication of content. As a result, common guidance was consolidated into the event logging and monitoring section of the Guidelines for System Monitoring.