Loading EN-304-621.md +18 −8 Original line number Diff line number Diff line Loading @@ -676,6 +676,10 @@ Unwanted traffic in the interfaces can cause a denial of service from the manage - **[LOG-2]** The write only log or tracing storage is deployed outside of the system deployment context. - **[LOG-3]** NMS emits SIEM events from relevant changes. - **[LOG-4]** SIEM transfer format, field attributes and event descriptions are available as part of the technical documentation. - **[LOG-5]** All system clocks are monitored. - **[LOG-6]** Deviation in clock consistency is reported forward as a SIEM event. Manfacturer shall implement logging system features listed in the table below. | Name | [EXP-L-0] | [EXP-L-1] | | --------------------- | ------------- | ----------- | Loading @@ -685,14 +689,20 @@ Unwanted traffic in the interfaces can cause a denial of service from the manage | [LOG-2] | Not required | Required | | [LOG-3] | Not required | Required | | [LOG-4] | Not required | Required | | [LOG-5] | Not required | Required | | [LOG-6] | Not required | Required | | Requirement | Assesment | | ----------- | ------------------------------------------------------------------------------------- | | ----------- | ---------------------------------------------------------------------------------------- | | [LOG-0] | All system clocks are synchronized to a NTP server or similar. | | [LOG-1] | From the process, it is impossible to overwrite the log output. | | [LOG-1] | From the running process, it is impossible to overwrite the stored log output. | | [LOG-2] | Technical documentation specifies how to integrate into an external logging system. | | [LOG-3] | Detailed information of all emitted events is available. | | [LOG-4] | National MSAs are able to validate the system design comformity without a deployment. | | [LOG-5a] | All system clocks, including the managed elements, are being tracked. | | [LOG-5b] | System clock deviation is available as a metric. | | [LOG-6a] | SIEM event for anomalities in clock accuracy is included in the technical documentation. | | [LOG-6b] | SIEM event is emitted when clock anomalies occur. | # 6 Security Profiles Loading Loading
EN-304-621.md +18 −8 Original line number Diff line number Diff line Loading @@ -676,6 +676,10 @@ Unwanted traffic in the interfaces can cause a denial of service from the manage - **[LOG-2]** The write only log or tracing storage is deployed outside of the system deployment context. - **[LOG-3]** NMS emits SIEM events from relevant changes. - **[LOG-4]** SIEM transfer format, field attributes and event descriptions are available as part of the technical documentation. - **[LOG-5]** All system clocks are monitored. - **[LOG-6]** Deviation in clock consistency is reported forward as a SIEM event. Manfacturer shall implement logging system features listed in the table below. | Name | [EXP-L-0] | [EXP-L-1] | | --------------------- | ------------- | ----------- | Loading @@ -685,14 +689,20 @@ Unwanted traffic in the interfaces can cause a denial of service from the manage | [LOG-2] | Not required | Required | | [LOG-3] | Not required | Required | | [LOG-4] | Not required | Required | | [LOG-5] | Not required | Required | | [LOG-6] | Not required | Required | | Requirement | Assesment | | ----------- | ------------------------------------------------------------------------------------- | | ----------- | ---------------------------------------------------------------------------------------- | | [LOG-0] | All system clocks are synchronized to a NTP server or similar. | | [LOG-1] | From the process, it is impossible to overwrite the log output. | | [LOG-1] | From the running process, it is impossible to overwrite the stored log output. | | [LOG-2] | Technical documentation specifies how to integrate into an external logging system. | | [LOG-3] | Detailed information of all emitted events is available. | | [LOG-4] | National MSAs are able to validate the system design comformity without a deployment. | | [LOG-5a] | All system clocks, including the managed elements, are being tracked. | | [LOG-5b] | System clock deviation is available as a metric. | | [LOG-6a] | SIEM event for anomalities in clock accuracy is included in the technical documentation. | | [LOG-6b] | SIEM event is emitted when clock anomalies occur. | # 6 Security Profiles Loading
