Security-relevant events, including individual user traceability (date, time, user ID), both successful and failed login attempts, activities by privileged accounts, and changes to security configurations, are logged and reviewed on a near real-time basis.
Are audit trails and logs maintained for network/system/application events...
Audit trails/logs maintained for network, system, and application events including authentication, access, configuration changes, and admin actions…
Are audit logs centrally stored and retained?
Audit logs are centrally stored and retained. All security-relevant events (authentication, authorization, admin actions, API calls, configuration…