Examples of Events Relevant to Monitoring
Catalogue of typical events to monitor for operational and security purposes.
Catalogue of typical events to monitor for operational and security purposes.
Technical and operational indicators for the assessment of the effectiveness of the security monitoring programme, with thresholds by risk level and mapping to the cross-cutting SbD-ToE governance dimensions.
Identification and definition of the technical and operational domains to be monitored in modern systems.
Applied examples of logging, alerts and correlation in real contexts
Practices to guarantee structured logging, secure transport and centralisation of operational events.
Organisational policy that defines the requirements for the production, formatting, centralisation, retention and protection of application and security logs, including a minimum event schema, mandatory events, masking of sensitive data, immutability and SIEM integration, proportional to the criticality level (L1, L2, L3).