Nist Security Log Management

This publication seeks to assist organizations in understanding the need for sound computer security log management.

Nist security log management.

Log management is essential to ensuring that computer security records are stored in sufficient detail for an appropriate period of time. This publication seeks to assist organizations in understanding the need for sound computer security log management. 3551 et seq public law p l 113 283. The national institute of standards and technology nist developed this document in furtherance of its statutory responsibilities under the federal information security management act fisma of 2002 public law 107 347.

It provides practical real world guidance on developing implementing and maintaining effective log management practices throughout an enterprise. Nist is responsible for developing information security standards and guidelines including minimum. Abbreviation s and synonym s. It provides practical real world guidance on developing implementing and maintaining effective log management practices throughout an enterprise.

Nist sp 800 92 helps organizations develop implement and maintain effective processes for managing logs which contain information about specific events occurring within information technology it systems and networks. Comments about specific definitions should be sent to the authors of the linked source publication. Check out nist s new cybersecurity measurements for information security page. Routine log analysis is.

For 20 years the computer security resource center csrc has provided access to nist s cybersecurity and information security related projects publications news and events csrc supports stakeholders in government industry and academia both in the u s. The national institute of standards and technology nist developed this document in furtherance of its statutory responsibilities under the federal information security management act fisma of 2002 public law 107 347. This publication has been developed by nist to further its statutory responsibilities under the federal information security modernization act of 2014 44 u s c. In this major update to csrc.

Need for computer security log management the process for generating transmitting storing analyzing and disposing of computer security log data. On september 22 24 2020 the iapp will host a virtual workshop on the development of a workforce capable of managing privacy risk. Log management for computer security log data only.