201 Information Security Logging and Event Monitoring

The Information Security Logging and Event Monitoring Standard includes information about:

• Log generation
• Storage, monitoring, and analysis
• Logging and monitoring roles and responsibilities
• The university’s preferred approach to log management
• Logging and monitoring expectations according to data and system classification
• Specific regulatory requirements for logging and monitoring
• Proper handling of logs to ensure privacy and confidentiality and maintain legal,
  regulatory, and contractual compliance
• How logs may be used during a suspected security event or incident