ISO 27001 A.8.15 Logging: What to Log, Retain and Review

Practical Evidence

• Log source inventory inside the ISMS scope
• Retention and protection (integrity, access control)
• Analysis / review records aligned to your procedures

Frequently Asked Questions

What is the official title of A.8.15?

Logging.

What does the control text require at a high level?

Logs that record activities, exceptions, faults and other relevant events shall be produced, stored, protected and analysed.

How does SIEM help?

A SIEM such as ThreatHawk centralizes production, protection, and analysis — retention and review procedures remain ISMS responsibilities.

Related ISO 27001 Resources

ISO 27001 hub · 93 controls · SoA · CSA · A.8.16