Date Published: September 2006
Author(s)
Karen Kent (NIST), Murugiah Souppaya (NIST)
The National Institute of Standards and Technology (NIST) developed this doocument in furtherance of its statutory responsibilities under the Federal Information security Management Act (FISMA) of 2002, Public Law 107-347. This publication seeks to assist organizations in understanding the need for sound computer security log management. It provides practical, real-world guidance on developing, implementing, and maintaining effective log management practices throughout an enterprise. The guidance in this publication covers several topics, including establishing log management infrastuctures, and developing and performing robust log management processes throughout an organization. The publication presents logging technologies from a high-level viewpoint, and it is not a step-by-step guide to implementing or using logging technologies.
The National Institute of Standards and Technology (NIST) developed this doocument in furtherance of its statutory responsibilities under the Federal Information security Management Act (FISMA) of 2002, Public Law 107-347. This publication seeks to assist organizations in understanding the need...
See full abstract
The National Institute of Standards and Technology (NIST) developed this doocument in furtherance of its statutory responsibilities under the Federal Information security Management Act (FISMA) of 2002, Public Law 107-347. This publication seeks to assist organizations in understanding the need for sound computer security log management. It provides practical, real-world guidance on developing, implementing, and maintaining effective log management practices throughout an enterprise. The guidance in this publication covers several topics, including establishing log management infrastuctures, and developing and performing robust log management processes throughout an organization. The publication presents logging technologies from a high-level viewpoint, and it is not a step-by-step guide to implementing or using logging technologies.
Hide full abstract
Keywords
computer security log management; FISMA; log management
Control Families
Audit and Accountability;
Incident Response;
Media Protection;
Physical and Environmental Protection;
System and Information Integrity;