PR.PS-04.251
Are all log generators configured to securely transmit logs to your organization's centralized logging infrastructure?
Explanation
This question assesses whether your organization has properly configured all systems, applications, and devices that generate logs to securely send those logs to your centralized logging infrastructure. Secure log transmission typically involves encrypted connections (TLS/SSL), authentication mechanisms, and proper access controls to prevent tampering or interception during transit. Evidence could include configuration documentation showing how log generators are set up to securely transmit logs, network diagrams illustrating the secure log collection architecture, or output from monitoring tools that verify successful and secure log transmission from various sources to the central logging system.
Implementation Example
Configure log generators to securely share their logs with the organization's logging infrastructure systems and services
ID: PR.PS-04.251
Context
- Function
- PR: PROTECT
- Category
- PR.PS: Platform Security
- Sub-Category
- Log records are generated and made available for continuous monitoring

