Fork me on GitHub

TestAndVerification -> Static depth for infrastructure: Analyze logs

Risk and Opportunity

Risk: Not getting are of happened attacks.
Opportunity: Check logs for keywords.

Usefulness and Requirements of this Activitiy

Usefullness: Medium
Required knowledge: Low (one discipline)
Required time: Low
Required resources (systems): Low

Additional Information

Implementation hints:

OWASP SAMM VERSION 2

ISO27001 2017