Detections
Analytics

MS.AAD.4.1v1 - Security logs SHALL be sent to the agency's security operations center for monitoring.

Information

The security risk of not having visibility into cyber attacks is reduced by collecting logs in the agency's centralized security detection infrastructure. This makes security events available for auditing, query, and incident response.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Follow the configuration instructions unique to the products and integration patterns at your organization to send the security logs to the security operations center for monitoring.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4

Plugin: microsoft_azure

Control ID: 585466c9e36de8ca5687652ef908175f48a8fdcc6d84c9fc58562db333bcfed2