...
| Panel |
|---|
Document Name: NCSA Security Operations Log Review Procedures Approved: Waiting for approval of HIPAA OfficerJune 24, 2020 |
Collection
NCSA continuously collects system logs and network data, and it utilizes automated tools to analyze and send notifications to the Security Operations and Incident Response Team.
...
System Administrators may request log reviews by the Security team by submitting a ticket or through the NCSA Help Desk.
Specific processes for review can be found in Security Log and Event Review Processes.
Tracking
Requests made directly via the ticket system or via the NCSA Help Desk are recorded and closed after an investigation completes. Findings that escalate to an incident investigation are tracked and managed per NCSA Incident Response Procedures, which include the appropriate reporting mechanisms.