SM-32—Remote Access: Activity Log Audit
>Control Description
Logs from remote sessions are audited for prohibited activity on a weekly basis.
Theme
Process
Type
Detective
Policy/Standard
Logging & Monitoring Standard>Implementation Guidance
1. Establish a process that ensures the logs from remote sessions be reviewed for prohibited activity on a weekly basis.
>Testing Procedure
1. Inspect evidence of logs of remote sessions to determine that the logs are reviewed for prohibited activity on a weekly basis.
>Audit Artifacts
E-SM-01
E-SM-27
E-SM-28
>Framework Mappings
Cross-framework mappings provided by Adobe CCF Open Source under Creative Commons License.
Ask AI
Configure your API key to use AI features.