SA-15(13) Logging Syntax

Before · 5.1.1+u4

After · 5.2.0

Logging Syntax

Before · 5.1.1+u4

After · 5.2.0

Require the developer of the system or system component to minimize the use of personally identifiable information in development and test environments.

Before · 5.1.1+u4

After · 5.2.0

In support of better incident response and the ability to more quickly reconstruct security-related actions, identifying specific requirements for secure logging facilitates the ability to connect application-produced audit event logs with operational data. Event types are consistent with the event types defined in [AU-02](#au-2).

Before · 5.1.1+u4

After · 5.2.0

sa-15.13_odp.01: secure logging format(s)
sa-15.13_odp.02: events types to log
sa-15.13_odp.03: level of detail to log

Before · 5.1.1+u4

After · 5.2.0

au-2, au-3, ir-4, ir-8, sa-5

Before · 5.1.1+u4

After · 5.2.0

SA-15(13) Determine if:

the developer of the system, system component, or system service uses [Assignment: secure logging format(s)] to log [Assignment: events types to log] at [Assignment: level of detail to log].