LOG-06: Clock Synchronization

Control Family:

Logging and Monitoring

Previous Version:

Control Statement

Use a reliable time source across all relevant information processing systems.

Implementation Guidance

Synchronizing system clocks enables proper coordination between systems and facilitates tracing and the reconstitution of activity timelines. Potential implementation guidance can be derived from the NIST Internet Time Servers overview (see https://tf.nist.gov/tf-cgi/servers.cgi). Also, the following concepts should be considered:

  1. Critical systems have the correct and consistent time.
  2. Time is synchronized across all systems.
  3. Time data is protected.
  4. Time settings are received from industry-accepted time sources.

Auditing Guidance

  1. Examine policy that establishes the time scale and epoch, or traceability, of time across systems.
  2. Evaluate the process that ensures synchronization of time on relevant systems.

[csf.tools Note: For more information on the Cloud Controls Matrix, visit the CSA Cloud Controls Matrix Homepage.]

Cloud Control Matrix is Copyright 2023 Cloud Security Alliance.