5.4.1.1—Events to be Logged
>Control Description
The following events shall be logged:
1. Successful and unsuccessful system log-on attempts.
2. Successful and unsuccessful attempts to use:
a. access permission on a user account, file, directory or other system resource;
b. create permission on a user account, file, directory or other system resource;
c. write permission on a user account, file, directory or other system resource;
d. delete permission on a user account, file, directory or other system resource;
e. change permission on a user account, file, directory or other system resource.
3. Successful and unsuccessful attempts to change account passwords.
4. Successful and unsuccessful actions by privileged accounts (i.e., root, Oracle, DBA, admin, etc.).
5. Successful and unsuccessful attempts for users to:
a. access the audit log file;
b. modify the audit log file;
c. destroy the audit log file.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.