CFM-08—Configuration Check Reconciliation: Logging

>Control Description

Organization reconciles the established device inventory against the enterprise log repository on a quarterly basis; devices which do not forward security configurations are remediated.

Theme

Process

Type

Corrective

Policy/Standard

Infrastructure Management Policy

>Implementation Guidance

1. Prepare an asset register to ensure asset life cycle is maintained as per the defined policy and/or standard of asset management. 2. Establish a process through which the device configuration logs can be fetched and reconciled with asset register quarterly. 3. Ensure that a process is established that tracks the deviations to remediation.

>Testing Procedure

1. Inspects Organization asset register to ensure asset life cycle is maintained as per the defined policy and/or standard of asset management. 2. Validate whether the device configuration logs are being reconciled with asset register quarterly. 3. Validate for a sample of deviations whether the remediation is done in a timely manner.