PR.PS-04.251

Are all log generators configured to securely transmit logs to your organization's centralized logging infrastructure?

Explanation

This question assesses whether your organization has properly configured all systems, applications, and devices that generate logs to securely send those logs to your centralized logging infrastructure. Secure log transmission typically involves encrypted connections (TLS/SSL), authentication mechanisms, and proper access controls to prevent tampering or interception during transit. Evidence could include configuration documentation showing how log generators are set up to securely transmit logs, network diagrams illustrating the secure log collection architecture, or output from monitoring tools that verify successful and secure log transmission from various sources to the central logging system.

Implementation Example

Configure log generators to securely share their logs with the organization's logging infrastructure systems and services

ID: PR.PS-04.251

Context

Function
PR: PROTECT
Category
PR.PS: Platform Security
Sub-Category
Log records are generated and made available for continuous monitoring

ResponseHub is the product I wish I had when I was a CTO

Previously I was co-founder and CTO of Progression, a VC backed HR-tech startup used by some of the biggest names in tech.

As our sales grew, security questionnaires quickly became one of my biggest pain-points. They were confusing, hard to delegate and arrived like London busses - 3 at a time!

I'm building ResponseHub so that other teams don't have to go through this. Leave the security questionnaires to us so you can get back to closing deals, shipping product and building your team.

Signature
Neil Cameron
Founder, ResponseHub
Neil Cameron