10 docs tagged with "monitorização"

Binary control checklist of the adoption of monitoring, alerting, incident response and continuous operational health signal practices.

Specifics of exception management in the context of monitoring and operations - alert silencing, log retention and regulatory implications

Practical integration of monitoring and response practices into the secure lifecycle

Technical and operational indicators for the assessment of the effectiveness of the security monitoring programme, with thresholds by risk level and mapping to the cross-cutting SbD-ToE governance dimensions.

Identification and definition of the technical and operational domains to be monitored in modern systems.

Principles and practices to ensure visibility, detection and effective response in production environments

Canonical catalogue of requirements for the security monitoring and operations programme (OPS-001 to OPS-017), with applicability by risk level and acceptance criteria for centralised logging, critical events, retention, SIEM, alerts, response SLA, correlation, integration with the IRP, behavioural detection, effectiveness metrics and continuous operational health signals, backups with tested restore and recovery of the application.

Policies required to support logging, detection and continuous response practices.

Organisational policy that defines the requirements for active monitoring after each deploy to production, including a mandatory observation window, minimum health metrics, alert thresholds, human validation and rollback activation criteria, proportional to the criticality level (L1, L2, L3).

Organisational policy that defines the requirements for security monitoring in production, including the definition of critical events, SIEM integration, behavioural correlation, coverage of monitoring domains and periodic review of detection rules, proportional to the criticality level (L1, L2, L3).