About
Aspects
1
Controls
4
Requirements
7
Aspect IDAspect NameControl IDControl NameRequirement IDRequirementLevel
2.02Log and Monitor2.02.1Application Audit Logs2.02.1.1
Audit trails exist for a subset of actions performed within the CCSS Trusted Environment.
Level I
2.02Log and Monitor2.02.1Application Audit Logs2.02.1.2
All actions performed by all users within the CCSS Trusted Environment are logged. Audit logs are retained for at least one year in a trusted environment.
Level II
2.02Log and Monitor2.02.2Audit Log Backup2.02.2.1
In addition to recording all actions performed within the CCSS Trusted Environment, this audit information is periodically backed up to a separate server.
Level II
2.02Log and Monitor2.02.2Audit Log Backup2.02.2.2
In addition to recording all actions performed within the CCSS Trusted Environment, this audit information is continually backed up to a separate server.
Level III
2.02Log and Monitor2.02.3Audit Log Monitoring2.02.3.1
The CCSS Trusted Environment's audit logs are monitored for suspicious activity, and alerts are generated when suspicious activity is detected. Appropriate personnel address the alerts generated. The monitoring frequency is defined by the entity and meets all components of requirement 2.03.2.1.
Level I
2.02Log and Monitor2.02.3Audit Log Monitoring2.02.3.2
The CCSS Trusted Environment's audit logs are continuously monitored for suspicious activity, and alerts are generated in real time when suspicious activity is detected. Appropriate personnel address the alerts generated.
Level II
2.02Log and Monitor2.02.4Blockchain State Monitoring2.02.4.1
Relevant blockchain state (confirmed and unconfirmed) as it relates to the CCSS Trusted Environment are continuously monitored for anomalous behavior, generating alerts. Appropriate personnel address the alerts that are generated.
Level III
Page 1 of 1