OPS-10—Logging and Monitoring - Concept
>Control Description
The Cloud Service Provider has established policies and instructions that govern the logging and monitoring of events on system components within its area of responsibility. These policies and instructions are documented, communicated and provided according to SP-01 with respect to the following aspects:
• Definition of events that could lead to a violation of the protection goals;
• Specifications for activating, stopping and pausing the various logs;
• Information regarding the purpose and retention period of the logs.
• Define roles and responsibilities for setting up and monitoring logging;
• Time synchronisation of system components; and
• Compliance with legal and regulatory frameworks.
Additional criteria: -
Ask AI
Configure your API key to use AI features.