| Date: | 01/01/2025 |
|---|---|
| Organization: | Cybersecurity and Enterprise Risk Management |
| Referenced Sources: | MGL Chapter 7D, Section 2 |
The Logging and Event Monitoring Standard reinforces the Commonwealth’s commitment to a logging and event monitoring strategy and outlines the controls necessary to safeguard the Commonwealth’s information assets and reduce risks.
The purpose of this standard is to establish the minimum requirements for security monitoring and event management, to detect unauthorized activities on Commonwealth information systems. This standard defines the following related controls and acceptable practices:
•Audit requirements for user activities, exceptions, and information security
events
•Logging activities and actions required to resolve system fault errors
•Guidelines for the frequency of reviewing audit logs
•Protection of audit logs through technical controls such as file permissions
•Integration of suspicious audit events and investigation into incident
response processes
