Requirement
In addition to the subcontrols in the ECC control 2-12-3, cybersecurity requirements for event logs and monitoring management for telework systems must include at least the following:
Sub-Controls
2-11-1-1
Requirement: Activating cybersecurity events logs on all technical components of telework systems.
2-11-1-2
Requirement: Monitoring and analyzing user behavior (UBA).
2-11-1-3
Requirement: Monitoring telework systems events around the clock.
2-11-1-4
Requirement: Updating and implementing cybersecurity monitoring procedures around the clock, to include monitoring remote access operations, especially remote access from outside the Kingdom of Saudi Arabia, after checking their authenticity.
References
- ECC – 2:2024 equivalent: 2-12-3
