You can search logs and produce reports on demand.
What it actually means
You need the ability to filter the mountain of log data down to what matters and produce a report on demand — for an investigation or an assessor. A SIEM or log platform with search/reporting covers this.
Pass or fail — an assessor needs a "yes" to each
- Logs can be searched/filtered (reduction).
- Reports can be generated on demand.
What to have ready
- SIEM/log-platform search + reporting capability
- A sample generated report
Where teams trip up
- Raw logs with no search/reporting tooling
- Can't produce a report without manual log-grepping
See where this control puts your score
Run all 110 requirements free in about 10 minutes — or draft your SSP language for this control. No signup.
Calculate your SPRS score →Draft your SSP language →Connected requirements
More in Audit & Accountability (3.3)
3.3.1 — Create and retain audit logs3.3.2 — Trace actions to individual users3.3.3 — Review and update what you log3.3.4 — Alert when logging breaks3.3.5 — Correlate and review your logs3.3.7 — Synchronize clocks for time stamps3.3.8 — Protect your logs from tampering3.3.9 — Limit who manages logging