Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleDoes your organisation record and store the logs of root/super user/ administrator actions for all cloud environments, networks and associated services?

Does your organisation record and store the logs of root/super user/ administrator actions for all cloud environments, networks and associated services?

Yes, where logging is available, it is stored for the maximum storage period offered by the service provider and / or stored indefinitely in our own database.

More information: https://commonplace.atlassian.net/l/cp/Pdp5zza5

Expand
titleAre all logs stored on a secure/hardened server that is logically separate from the systems being logged?

Are all logs stored on a secure/hardened server that is logically separate from the systems being logged?

Not necessarily "servers" but for example, AWS holds logs on activities separate to the actual platform, GitHub also retains logs. We also port log information out to separate platforms such as papertrail or internal databases.

...