ISO 27001 8.15 Logging Requirement:
"Logs that record activities, exceptions, faults and other relevant events shall be produced, stored, protected and analysed."[1]
ISO 27001 8.15 Logging Requirement Explanation:
You must ensure that systems create and retain audit logs. The collected logs must contain enough information to identify and investigate potentially unauthorized activity. You must define an audit log retention period.
References:
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you