8.12: Collect Service Provider Logs
CSF v1.1 References:
Group:
Control is new to this version of the control set.
Control Statement
Collect service provider logs, where supported. Example implementations include collecting authentication and authorization events, data creation and disposal events, and user management events.
[csf.tools Note: For more information on the Critical Security Controls, visit the Center for Internet Security.]