SPA Objectives - SIEM Tool: Revision history

Diff selection: Mark the radio buttons of the revisions to compare and hit enter or the button at the bottom.
Legend: (cur) = difference with latest revision, (prev) = difference with preceding revision, m = minor edit.

25 September 2025

  • curprev 13:3013:30, 25 September 2025Liatris talk contribs 1,850 bytes +1,850 Created page with "== When is a SIEM an SPA? == A SIEM is an SPA when it ingests/aggregates logs from one or more CUI assets. == Assessment Objectives to Assess == AU.L2-3.3.1 - SYSTEM AUDITING [c,d,f] * A SIEM will shows audit records are created, contain the defined content, and are retained as defined. AU.L2-3.3.2 - USER ACCOUNTABILITY [b] * The SIEM will show that audit records contain the defined content necessary to trace users to their actions. AU.L2-3.3.4 - AUDIT FAILURE ALERT..." Tag: Visual edit: Switched