Even More Logging Questions - Answered
...trails so they cannot be altered
10.5.1 Limit viewing of audit trails to those with a job-related need
10.5.2 Protect audit trail files from unauthorized modifications
10.5.3 Promptly back-up audit trail files to a centralized log server or media that is difficult to
alter
NIST guidance for FISMA also says something similar (for example, look...
