SM-09—Log Reconciliation: CMDB

>Control Description

Organization reconciles the established device inventory against the enterprise log repository on a quarterly basis; devices which do not forward log data are remediated.

Theme

Process

Type

Corrective

Policy/Standard

Infrastructure Management Policy

>Implementation Guidance

1. Design a process to prepare a quarterly Log reconciliation report which includes reconciliation of the established device inventory against the enterprise log repository. 2. Wherever deviation is identified from the reconciliation, ensure that the actions are taken for remediation of the devices which do not forward log data.

>Testing Procedure

1. Inspect Organization's Log reconciliation report to determine that the established device inventory against the enterprise log repository is reconciled on a quarterly basis. 2. Inspect the actions taken for remediation of the devices which do not forward log data.