PSS-04—Error handling and Logging Mechanisms
>Control Description
The cloud service provided is equipped with error handling and logging mechanisms. These enable cloud users to obtain security-related information about the security status of the cloud service as well as the data, services or functions it provides.
The information is detailed enough to allow cloud users to check the following aspects, insofar as they are applicable to the cloud service:
• Which data, services or functions available to the cloud user within the cloud service, have been accessed by whom and when (Audit Logs);
• Malfunctions during processing of automatic or manual actions; and
• Changes to security-relevant configuration parameters, error handling and logging mechanisms, user authentication, action authorisation, cryptography, and communication security.
The logged information is protected from unauthorised access and modification and can be deleted by the Cloud Customer.
If the cloud customer is responsible for the activation or type and scope of logging, the Cloud Service Provider must provide appropriate logging capabilities.
Additional criteria: Cloud users can retrieve security-related information via documented interfaces which are suitable for further processing this information as part of their Security Information and Event Management (SIEM).
Ask AI
Configure your API key to use AI features.