T3.6.1 - MONITORING POLICY AND PROCEDURES Implementation Guidance
The entity shall establish a monitoring policy and related procedures.
Back to T3.6.1 - P3 - MONITORING POLICY AND PROCEDURES
The entity should define events that need to be captured, the frequency of audit log reviews, and retention requirements for audit logs. Monitoring procedures should be developed, detailing the steps of the monitoring, the response actions and how the monitoring process feeds into the incident response process. Clear responsibilities should be assigned for the personnel performing monitoring. Each addition/change of systems in the facility should be considered for the amendment of the monitoring policy and procedures, to ensure they properly cover the updated environment.
