TIBCO LogLogic Reports and Alerts Quick Reference
The following table describes the reports and alerts included in the LogLogic® Compliance Suite - Sarbanes-Oxley Edition and COBIT 4.1.
| Control Objective | Description | Compliance Suite Reports and Alerts |
|---|---|---|
| PO2 Define the Information Architecture | ||
| PO2.3 | Data Classification Scheme | Compliance Suite Reports
COBIT: Guardium SQL Guard Audit Data Access COBIT: Guardium SQL Guard Data Access COBIT: HP NonStop Audit Object Access COBIT: LogLogic DSM Data Access COBIT: Microsoft Sharepoint Content Deleted COBIT: Microsoft Sharepoint Content Updates COBIT: Microsoft SQL Server Data Access COBIT: Microsoft SQL Server Schema Corruption COBIT: Oracle Database Data Access COBIT: Sybase ASE Database Data Access COBIT: i5/OS Object Access Compliance Suite Alerts COBIT: Guardium SQL Guard Data Access COBIT: LogLogic DSM Data Access COBIT: Microsoft Sharepoint Content Deleted COBIT: Microsoft Sharepoint Content Updated COBIT: Oracle Database Data Access COBIT: Sybase ASE Database Data Access |
| PO2.4 | Integrity Management | Compliance Suite Report
COBIT: Microsoft Sharepoint Content Deleted COBIT: Microsoft Sharepoint Content Updates COBIT: Microsoft SQL Server Schema Corruption COBIT: Tripwire Modifications, Additions, and Deletions Compliance Suite Alerts COBIT: Microsoft Sharepoint Content Deleted COBIT: Microsoft Sharepoint Content Updated |
| PO4 Define the IT Processes, Organization and Relationships | ||
| PO4.11 | Segregation of Duties | Compliance Suite Reports
COBIT: Pulse Connect Secure successful Logins COBIT: Accepted VPN Connections - RADIUS COBIT: Account Activities on UNIX Servers COBIT: Account Activities on Windows Servers COBIT: Accounts Created on NetApp Filer Audit COBIT: Accounts Created on NetApp Filer COBIT: Accounts Created on Sidewinder COBIT: Accounts Created on Symantec Endpoint Protection COBIT: Accounts Created on TIBCO ActiveMatrix Administrator COBIT: Accounts Created on TIBCO Administrator COBIT: Accounts Created on UNIX Servers COBIT: Accounts Created on Windows Servers COBIT: Active Directory System Changes COBIT: Administrator Logins on Windows Servers COBIT: Check Point Management Station Login COBIT: Cisco ISE, ACS Accounts Created COBIT: DB2 Database Successful Logins COBIT: ESX Accounts Activities COBIT: ESX Accounts Created COBIT: ESX Group Activities COBIT: ESX Logins Succeeded COBIT: F5 BIG-IP TMOS Login Successful COBIT: Group Activities on NetApp Filer Audit COBIT: Group Activities on Symantec Endpoint Protection COBIT: Group Activities on TIBCO ActiveMatrix Administrator COBIT: Group Activities on UNIX Servers COBIT: Group Activities on Windows Servers COBIT: Groups Created on NetApp Filer Audit COBIT: Groups Created on TIBCO ActiveMatrix Administrator COBIT: Groups Created on UNIX Servers COBIT: Groups Created on Windows Servers |
| PO4.11 | Segregation of Duties | Compliance Suite Reports
(Cont.)
COBIT: Groups Deleted on NetApp Filer Audit COBIT: Groups Deleted on TIBCO ActiveMatrix Administrator COBIT: Groups Deleted on UNIX Servers COBIT: Groups Deleted on Windows Servers COBIT: Guardium SQL Guard Audit Logins COBIT: Guardium SQL Guard Logins COBIT: HP NonStop Audit Login Successful COBIT: HP NonStop Audit Permissions Changed COBIT: i5/OS Access Control List Modifications COBIT: Juniper SSL VPN Successful Logins COBIT: Juniper SSL VPN (Secure Access) Successful Logins COBIT: Last Activities Performed by Administrators COBIT: Last Activities Performed by All Users COBIT: Logins by Authentication Type COBIT: LogLogic DSM Logins COBIT: LogLogic Management Center Account Activities COBIT: LogLogic Management Center Login COBIT: Microsoft Operations Manager - Windows Accounts Activities COBIT: Microsoft Operations Manager - Windows Accounts Created COBIT: Microsoft Operations Manager - Windows Permissions Modified COBIT: Microsoft Sharepoint Permissions Changed COBIT: Microsoft Sharepoint Policy Add, Remove, or Modify COBIT: Microsoft SQL Server Database Permission Events COBIT: Microsoft SQL Server Database Successful Logins COBIT: NetApp Filer Audit Login Successful COBIT: NetApp Filer Login Successful COBIT: Oracle Database Permission Events COBIT: Oracle Database Successful Logins |
| PO4.11 | Segregation of Duties | Compliance Suite Reports
(Cont.)
COBIT: Permissions Modified on Windows Servers COBIT: RACF Accounts Created COBIT: RACF Permissions Changed COBIT: RACF Successful Logins COBIT: Root Logins COBIT: Successful Logins COBIT: Sybase ASE Successful Logins COBIT: TIBCO ActiveMatrix Administrator Permission Changes COBIT: TIBCO ActiveMatrix Administrator Successful Logins COBIT: TIBCO Administrator Permission Changes COBIT: Unauthorized Logins COBIT: Unencrypted Logins COBIT: vCenter Orchestrator Virtual Machine Created COBIT: vCenter Orchestrator Virtual Machine Deleted COBIT: vCenter Successful Logins COBIT: vCenter User Permission Change COBIT: vCenter Virtual Machine Created COBIT: vCenter Virtual Machine Deleted COBIT: vCloud Organization Created COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud Successful Logins COBIT: vCloud User Created COBIT: vCloud vApp Created, Modified, or Deleted COBIT: vCloud vDC Created, Modified, or Deleted |
| PO4.11 | Segregation of Duties | Compliance Suite Alerts
COBIT: Accounts Created COBIT: Cisco PIX, ASA, FWSM Logon Success COBIT: DB2 Database User Added or Dropped COBIT: Groups Created COBIT: Groups Deleted COBIT: Group Members Added COBIT: Guardium SQL Guard Logins COBIT: HP NonStop Audit Permission Changed COBIT: i5/OS Permission or Policy Change COBIT: Juniper Firewall Logon Success COBIT: Logins Succeeded COBIT: LogLogic DSM Logins COBIT: Microsoft Operations Manager - Permissions Changed COBIT: Microsoft Sharepoint Permission Changed COBIT: Microsoft Sharepoint Policies Added, Removed, Modified COBIT: Oracle Database Permissions Changed COBIT: RACF Permissions Changed COBIT: Symantec Endpoint Protection Policy Add, Delete, Modify COBIT: TIBCO ActiveMatrix Administrator Permission Changed COBIT: UNIX Groups Added COBIT: UNIX Groups Deleted COBIT: vCenter Create Virtual Machine COBIT: vCenter Delete Virtual Machine COBIT: vCenter Orchestrator Create Virtual Machine COBIT: vCenter Orchestrator Delete Virtual Machine COBIT: vCenter Permission Change COBIT: vCenter User Login Successful COBIT: vCloud Director Login Success COBIT: vCloud Organization Created |
| PO4.11 | Segregation of Duties | Compliance Suite Alerts
(Cont.)
COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud User Created COBIT: vCloud vApp Created, Deleted, or Modified COBIT: vCloud vDC Created, Modified, or Deleted COBIT: Windows Group Members Added COBIT: Windows Groups Created COBIT: Windows Groups Deleted COBIT: Windows Permissions Changed |
| PO7 Manage IT Human Resources | ||
| PO7.8 | Job Change and Termination | Compliance Suite Reports
COBIT: Pulse Connect Secure Successful Logins COBIT: Accepted VPN Connections - RADIUS COBIT: Account Activities on UNIX Servers COBIT: Account Activities on Windows Servers COBIT: Accounts Changed on NetApp Filer COBIT: Accounts Changed on TIBCO Administrator COBIT: Accounts Created on NetApp Filer COBIT: Accounts Created on NetApp Filer Audit COBIT: Accounts Created on Sidewinder COBIT: Accounts Created on Symantec Endpoint Protection COBIT: Accounts Created on TIBCO ActiveMatrix Administrator COBIT: Accounts Created on TIBCO Administrator COBIT: Accounts Changed on UNIX Servers COBIT: Accounts Changed on Windows Servers COBIT: Accounts Changed on Sidewinder COBIT: Accounts Created on UNIX Servers COBIT: Accounts Created on Windows Servers COBIT: Accounts Deleted on NetApp Filer COBIT: Accounts Deleted on NetApp Filer Audit COBIT: Accounts Deleted on Sidewinder COBIT: Accounts Deleted on Symantec Endpoint Protection |
| PO7.8 | Job Change and Termination | Compliance Suite Reports
(Cont.)
COBIT: Accounts Deleted on TIBCO ActiveMatrix Administrator COBIT: Accounts Deleted on TIBCO Administrator COBIT: Accounts Deleted on UNIX Servers COBIT: Accounts Deleted on Windows Servers COBIT: Active VPN Connections for Cisco VPN Concentrators COBIT: Active VPN Connections for Nortel Contivity COBIT: Active VPN Connections for RADIUS COBIT: Check Point Management Station Login COBIT: Cisco ISE, ACS Accounts Created COBIT: Cisco ISE, ACS Accounts Removed COBIT: DB2 Database Failed Logins COBIT: DB2 Database Successful Logins COBIT: ESX Accounts Activities COBIT: ESX Accounts Created COBIT: ESX Accounts Deleted COBIT: ESX Failed Logins COBIT: ESX Group Activities COBIT: ESX Logins Failed Unknown User COBIT: ESX Logins Succeeded COBIT: F5 BIG-IP TMOS Login Failed COBIT: F5 BIG-IP TMOS Login Successful COBIT: Failed Logins COBIT: Group Activities on NetApp Filer Audit COBIT: Group Activities on Symantec Endpoint Protection COBIT: Group Activities on TIBCO ActiveMatrix Administrator COBIT: Group Activities on UNIX Servers COBIT: Group Activities on Windows Servers COBIT: Guardium SQL Guard Audit Logins COBIT: Guardium SQL Guard Logins COBIT: HP NonStop Audit Login Failed COBIT: HP NonStop Audit Login Successful COBIT: HP NonStop Audit Permissions Changed |
| PO7.8 | Job Change and Termination | Compliance Suite Reports
(Cont.)
COBIT: Last Activities Performed by All Users COBIT: i5/OS Access Control List Modifications COBIT: i5/OS Network Authentication Events COBIT: Juniper SSL VPN Successful Logins COBIT: Juniper SSL VPN (Secure Access) Successful Logins COBIT: Last Activities Performed by Administrators COBIT: Logins by Authentication Type COBIT: LogLogic DSM Logins COBIT: LogLogic Management Center Account Activities COBIT: LogLogic Management Center Login COBIT: Microsoft Operations Manager - Windows Accounts Activities COBIT: Microsoft Operations Manager - Windows Accounts Changed COBIT: Microsoft Operations Manager - Windows Accounts Created COBIT: Microsoft Operations Manager - Windows Accounts Enabled COBIT: Microsoft Operations Manager - Windows Permissions Modified COBIT: Microsoft SQL Server Database Failed Logins COBIT: Microsoft SQL Server Database Successful Logins COBIT: NetApp Filer Audit Group Members Deleted COBIT: NetApp Filer Audit Login Failed COBIT: NetApp Filer Audit Login Successful COBIT: NetApp Filer Login Failed COBIT: NetApp Filer Login Successful COBIT: Oracle Database Failed Logins COBIT: Oracle Database Successful Logins COBIT: Permissions Modified on Windows Servers COBIT: RACF Accounts Created COBIT: RACF Accounts Deleted COBIT: RACF Accounts Modified COBIT: RACF Failed Logins COBIT: RACF Permissions Changed COBIT: RACF Successful Logins |
| PO7.8 | Job Change and Termination | Compliance Suite Reports
(Cont.)
COBIT: Successful Logins COBIT: Sybase ASE Failed Logins COBIT: Sybase ASE Successful Logins COBIT: TIBCO ActiveMatrix Administrator Failed Logins COBIT: TIBCO ActiveMatrix Administrator Permission Changes COBIT: TIBCO ActiveMatrix Administrator Successful Logins COBIT: TIBCO Administrator Permission Changes COBIT: Unencrypted Logins COBIT: UNIX Failed Logins COBIT: Users Removed from Servers COBIT: vCenter Failed Logins COBIT: vCenter Orchestrator Failed Logins COBIT: vCenter Successful Logins COBIT: vCloud Failed Logins COBIT: vCloud Successful Logins COBIT: vCloud User Created COBIT: vCloud User Deleted or Removed COBIT: Windows Group Members Deleted Compliance Suite Alerts COBIT: Accounts Created COBIT: Accounts Deleted COBIT: Accounts Modified COBIT: Cisco PIX, ASA, FWSM Logon Failure COBIT: Cisco PIX, ASA, FWSM Logon Success COBIT: DB2 Database User Added or Dropped COBIT: Guardium SQL Guard Logins COBIT: Groups Deleted COBIT: Group Members Added COBIT: Group Members Deleted COBIT: Groups Modified COBIT: HP NonStop Audit Permission Changed COBIT: i5/OS Network Profile Changes COBIT: i5/OS User Profile Changes |
| PO7.8 | Job Change and Termination | Compliance Suite Alerts
(Cont.)
COBIT: Juniper Firewall Logon Failure COBIT: Juniper Firewall Logon Success COBIT: Logins Failed COBIT: Logins Succeeded COBIT: LogLogic DSM Logins COBIT: NetApp Filer NIS Group Update COBIT: UNIX Groups Deleted COBIT: UNIX Groups Modified COBIT: vCenter Orchestrator Login Failed COBIT: vCenter User Login Failed COBIT: vCenter User Login Successful COBIT: vCloud Director Login Failed COBIT: vCloud Director Login Success COBIT: vCloud User Created COBIT: vCloud User, Group, or Role Modified COBIT: Windows Group Members Added COBIT: Windows Group Members Deleted COBIT: Windows Groups Deleted COBIT: Windows Groups Modified |
| AI2 Acquire and Maintain Application Software | ||
| AI2.3 | Application Control and Auditability | Compliance Suite Reports
COBIT: ESX Kernel log daemon terminating COBIT: ESX Kernel logging Stop COBIT: ESX Syslogd Restart COBIT: LogLogic File Retrieval Errors COBIT: LogLogic Message Routing Errors COBIT: RACF Process Started COBIT: vCenter Orchestrator Virtual Machine Created COBIT: vCenter Orchestrator Virtual Machine Deleted COBIT: vCenter Restart ESX Services |
| AI2.3 | Application Control and Auditability | Compliance Suite Reports
(Cont.)
COBIT: vCenter Virtual Machine Created COBIT: vCenter Virtual Machine Deleted COBIT: vCloud Organization Created COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud vApp Created, Modified, or Deleted COBIT: vCloud vDC Created, Modified, or Deleted COBIT: Windows New Services Installed |
| AI2.3 | Application Control and Auditability | Compliance Suite Alerts
COBIT: LogLogic Message Routing Errors COBIT: LogLogic File Retrieval Errors COBIT: RACF Process Started COBIT: vCenter Create Virtual Machine COBIT: vCenter Delete Virtual Machine COBIT: vCenter Restart ESX Services COBIT: vCenter Orchestrator Create Virtual Machine COBIT: vCenter Orchestrator Delete Virtual Machine COBIT: vCloud Organization Created COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud vApp Created, Deleted, or Modified COBIT: vCloud vDC Created, Modified, or Deleted COBIT: Windows Programs Accessed |
| AI2.4 | Application Security and Availability | Compliance Suite Reports
COBIT: Active Directory System Changes COBIT: HP NonStop Audit Permissions Changed COBIT: i5/OS Access Control List Modifications COBIT: Microsoft Operations Manager - Windows Permissions Modified COBIT: Microsoft Sharepoint Permissions Changed COBIT: Microsoft Sharepoint Policy Add, Remove, or Modify COBIT: Microsoft SQL Server Database Permission Events COBIT: Oracle Database Permission Events COBIT: Permissions Modified on Windows Servers COBIT: RACF Permissions Changed COBIT: TIBCO ActiveMatrix Administrator Permission Changes COBIT: TIBCO Administrator Permission Changes COBIT: vCenter Orchestrator Virtual Machine Created COBIT: vCenter Orchestrator Virtual Machine Deleted COBIT: vCenter User Permission Change COBIT: vCenter Virtual Machine Created COBIT: vCenter Virtual Machine Deleted COBIT: vCloud Organization Created COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud vApp Created, Modified, or Deleted COBIT: vCloud vDC Created, Modified, or Deleted Compliance Suite Alerts COBIT: HP NonStop Audit Permission Changed COBIT: i5/OS Permission or Policy Change COBIT: Microsoft Sharepoint Permission Changed COBIT: Microsoft Sharepoint Policies Added, Removed, Modified COBIT: Oracle Database Permissions Changed COBIT: RACF Permissions Changed |
| AI2.4 | Application Security and Availability | Compliance Suite Reports
(Cont.)
COBIT: Symantec Endpoint Protection Policy Add, Delete, Modify COBIT: TIBCO ActiveMatrix Administrator Permission Changed COBIT: vCenter Create Virtual Machine COBIT: vCenter Delete Virtual Machine COBIT: vCenter Orchestrator Delete Virtual Machine COBIT: vCenter Permission Change COBIT: vCenter Orchestrator Create Virtual Machine COBIT: vCenter Orchestrator Delete Virtual Machine COBIT: vCloud Organization Created COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud vApp Created, Deleted, or Modified COBIT: vCloud vDC Created, Modified, or Deleted COBIT: Windows Permissions Changed |
| AI3 Acquire and Maintain Technology Infrastructure | ||
| AI3.2 | Infrastructure Resource Protection and Availability | Compliance Suite Reports
COBIT: Active Directory System Changes COBIT: Check Point Objects Created COBIT: Check Point Objects Deleted COBIT: Creation and Deletion of System Level Objects: AIX Audit COBIT: Creation and Deletion of System Level Objects: DB2 Database COBIT: Creation and Deletion of System Level Objects: HP-UX Audit COBIT: Creation and Deletion of System Level Objects: Windows COBIT: Creation and Deletion of System Level Objects: Oracle COBIT: Creation and Deletion of System Level Objects: SQL Server COBIT: Creation and Deletion of System Level Objects: Solaris BSM |
| AI3.2 | Infrastructure Resource Protection and Availability | Compliance Suite Reports
(Cont.)
COBIT: Domain activities on Symantec Endpoint Protection COBIT: i5/OS Object Creation and Deletion COBIT: Microsoft SQL Server Schema Corruption COBIT: Sybase ASE Database Create Events COBIT: Sybase ASE Database Drop Events COBIT: Tripwire Modifications, Additions, and Deletions COBIT: Trusted Domain Created on Windows Servers COBIT: Trusted Domain Deleted on Windows Servers COBIT: vCenter Orchestrator Virtual Machine Created COBIT: vCenter Orchestrator Virtual Machine Deleted COBIT: vCenter Virtual Machine Created COBIT: vCenter Virtual Machine Deleted COBIT: vCloud Organization Created COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud vApp Created, Modified, or Deleted COBIT: vCloud vDC Created, Modified, or Deleted |
| AI3.2 | Infrastructure Resource Protection and Availability | Compliance Suite Alerts
COBIT: Cisco PIX, ASA, FWSM NAT Failure COBIT: Cisco PIX, ASA, FWSM Protocol Failure COBIT: Cisco PIX, ASA, FWSM Routing Failure COBIT: vCenter Create Virtual Machine COBIT: vCenter Delete Virtual Machine COBIT: vCenter Orchestrator Create Virtual Machine COBIT: vCenter Orchestrator Delete Virtual Machine COBIT: vCloud Organization Created COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud vApp Created, Deleted, or Modified COBIT: vCloud vDC Created, Modified, or Deleted |
| AI3.3 | Infrastructure Maintenance | Compliance Suite Reports
COBIT: Active Directory System Changes COBIT: Check Point Configuration Changes COBIT: Cisco ISE, ACS Configuration Changes COBIT: Cisco Peer Reset/Reload COBIT: Cisco Peer Supervisor Status Changes COBIT: Cisco PIX, ASA, FWSM Failover Disabled COBIT: Cisco PIX, ASA, FWSM Failover Performed COBIT: Cisco Routers and Switches Restart COBIT: DB2 Database Configuration Changes COBIT: DB2 Database Stop and Start Events COBIT: Cisco ESA: Updated COBIT: F5 BIG-IP TMOS Restarted COBIT: Guardium SQL Guard Audit Configuration Changes COBIT: Guardium SQL Guard Audit Startup or Shutdown COBIT: Guardium SQL Guard Configuration Changes COBIT: Guardium SQL Guard Startup or Shutdown COBIT: HP NonStop Audit Configuration Changes COBIT: i5/OS System Management Changes COBIT: Juniper Firewall Reset Accepted COBIT: Juniper Firewall Reset Imminent COBIT: Juniper Firewall Restarted COBIT: LogLogic DSM Configuration Changes COBIT: LogLogic DSM Startup or Shutdown COBIT: LogLogic Management Center Upgrade Success COBIT: LogLogic Universal Collector Configuration Changes COBIT: Microsoft Operations Manager - Windows Servers Restarted COBIT: Microsoft SQL Server Configuration Changes COBIT: Microsoft SQL Server Shutdown by Reason COBIT: Oracle Database Configuration Changes COBIT: Oracle Database Shutdown |
| AI3.3 | Infrastructure Maintenance | Compliance Suite Reports
(Cont.)
COBIT: Peer Servers and Status COBIT: Peer Servers and Status - Blue Coat Proxy COBIT: Peer Servers and Status - Cisco WSA COBIT: Peer Servers and Status - Microsoft IIS COBIT: Periodic Review of Log Reports COBIT: Periodic Review of User Access Logs COBIT: RACF Process Started COBIT: Sidewinder Configuration Changes COBIT: Sybase ASE Database Configuration Changes COBIT: Sybase ASE Database Startup or Shutdown COBIT: Symantec AntiVirus: Updated COBIT: Symantec Endpoint Protection Configuration Changes COBIT: Symantec Endpoint Protection: Updated COBIT: vCenter Orchestrator Virtual Machine Created COBIT: vCenter Orchestrator Virtual Machine Deleted COBIT: vCenter Orchestrator Virtual Machine Shutdown COBIT: vCenter Orchestrator Virtual Machine Started COBIT: vCenter Shutdown or Restart of ESX Server COBIT: vCenter Virtual Machine Created COBIT: vCenter Virtual Machine Deleted COBIT: vCenter Virtual Machine Shutdown COBIT: vCenter Virtual Machine Started COBIT: vCloud Organization Created COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud vApp Created, Modified, or Deleted COBIT: vCloud vDC Created, Modified, or Deleted COBIT: Windows New Services Installed COBIT: Windows Servers Restarted COBIT: Windows Software Update Activities COBIT: Windows Software Update Failures COBIT: Windows Software Update Successes |
| AI3.3 | Infrastructure Maintenance | Compliance Suite Alerts
COBIT: Check Point Policy Changed COBIT: Microsoft Operations Manager - Windows Server Restarted COBIT: Cisco ISE, ACS Configuration Changed COBIT: Cisco PIX, ASA, FWSM Failover Disabled COBIT: Cisco PIX, ASA, FWSM Failover Errors COBIT: Cisco PIX, ASA, FWSM Failover Performed COBIT: System Restarted COBIT: Cisco Switch Card Insert COBIT: Cisco Switch Device Reload COBIT: Cisco Switch Device Restart COBIT: Cisco Switch HA Failure (ver) COBIT: DB2 Database Configuration Change COBIT: DB2 Database Started or Stopped COBIT: DNS Server Shutdown COBIT: DNS Server Started COBIT: Guardium SQL Guard Config Changes COBIT: Guardium SQL Guard Startup or Shutdown COBIT: HP NonStop Audit Configuration Changed COBIT: i5/OS Server or Service Status Change COBIT: i5/OS Software Updates COBIT: Juniper Firewall HA State Change COBIT: Juniper Firewall Peer Missing COBIT: Juniper Firewall System Reset COBIT: LogLogic Disk Full COBIT: LogLogic DSM Configuration Changes COBIT: LogLogic DSM Startup or Shutdown COBIT: LogLogic Management Center Upgrade Succeeded COBIT: LogLogic Universal Collector Configuration Changed COBIT: Microsoft SQL Server Shutdown COBIT: NetApp Bad File Handle COBIT: NetApp Filer Disk Failure COBIT: NetApp Filer Disk Missing COBIT: NetApp Filer File System Full COBIT: NetApp Filer Disk Inserted COBIT: NetApp Filer Disk Pulled |
| AI3.3 | Infrastructure Maintenance | Compliance Suite Alerts
(Cont.)
COBIT: Oracle Database Configuration Change COBIT: Oracle Database Shutdown COBIT: RACF Process Started COBIT: Sidewinder Configuration Changed COBIT: Sybase ASE Database Config Changes COBIT: Sybase ASE Database Started COBIT: Sybase ASE Database Stopped COBIT: Symantec Endpoint Protection Configuration Changed COBIT: System Anomalies COBIT: System Restarted COBIT: vCenter Create Virtual Machine COBIT: vCenter Delete Virtual Machine COBIT: vCenter Orchestrator Create Virtual Machine COBIT: vCenter Orchestrator Delete Virtual Machine COBIT: vCenter Orchestrator Virtual Machine Shutdown COBIT: vCenter Orchestrator Virtual Machine Started COBIT: vCenter Shutdown or Restart ESX COBIT: vCenter Virtual Machine Shutdown COBIT: vCenter Virtual Machine Started COBIT: vCloud Organization Created COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud vApp Created, Deleted, or Modified COBIT: vCloud vDC Created, Modified, or Deleted COBIT: System Restarted COBIT: Windows Software Updates COBIT: Windows Software Updates Failed COBIT: Windows Software Updates Succeeded |
| AI6 Manage Changes | ||
| AI6 | Change Standards and Procedures | Compliance Suite Reports
COBIT: Cisco PIX, ASA, FWSM Failover Disabled COBIT: Cisco PIX, ASA, FWSM Failover Performed COBIT: vCenter Orchestrator Virtual Machine Created |
| AI6 | Change Standards and Procedures | Compliance Suite Reports
(Cont.)
COBIT: vCenter Orchestrator Virtual Machine Deleted COBIT: vCenter Orchestrator Virtual Machine Shutdown COBIT: vCenter Orchestrator Virtual Machine Started COBIT: vCenter Shutdown or Restart of ESX Server COBIT: vCenter Virtual Machine Created COBIT: vCenter Virtual Machine Deleted COBIT: vCenter Virtual Machine Shutdown COBIT: vCenter Virtual Machine Started COBIT: vCloud Organization Created COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud vApp Created, Modified, or Deleted COBIT: vCloud vDC Created, Modified, or Deleted Compliance Suite Alerts COBIT: Cisco PIX, ASA, FWSM Failover Disabled COBIT: Cisco PIX, ASA, FWSM Failover Errors COBIT: Cisco PIX, ASA, FWSM Failover Performed COBIT: System Restarted COBIT: Cisco Switch Device Reload COBIT: Cisco Switch Device Restart COBIT: Cisco Switch HA Failure (ver) COBIT: DB2 Database Configuration Change COBIT: DB2 Database Started or Stopped COBIT: DNS Server Shutdown COBIT: DNS Server Started COBIT: i5/OS Server or Service Status Change COBIT: Juniper Firewall HA State Change COBIT: Juniper Firewall Peer Missing COBIT: Juniper Firewall System Reset COBIT: Microsoft SQL Server Shutdown COBIT: Microsoft Operations Manager - Windows Server Restarted COBIT: NetApp Filer File System Full COBIT: Oracle Database Configuration Change COBIT: Oracle Database Shutdown |
| AI6 | Change Standards and Procedures | Compliance Suite Alerts
(Cont.)
COBIT: System Anomalies COBIT: System Restarted COBIT: vCenter Create Virtual Machine COBIT: vCenter Delete Virtual Machine COBIT: vCenter Orchestrator Create Virtual Machine COBIT: vCenter Orchestrator Delete Virtual Machine COBIT: vCenter Orchestrator Virtual Machine Shutdown COBIT: vCenter Orchestrator Virtual Machine Started COBIT: vCenter Shutdown or Restart ESX COBIT: vCenter Virtual Machine Shutdown COBIT: vCenter Virtual Machine Started COBIT: vCloud Organization Created COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud vApp Created, Deleted, or Modified COBIT: vCloud vDC Created, Modified, or Deleted COBIT: System Restarted |
| AI6.1 | Change Standards and Procedures | Compliance Suite Reports
COBIT: Active Directory System Changes COBIT: Check Point Configuration Changes COBIT: Check Point Objects Modified COBIT: Cisco ESA: Updated COBIT: Cisco ISE, ACS Configuration Changes COBIT: Cisco Peer Reset/Reload COBIT: Cisco Peer Supervisor Status Changes COBIT: Cisco Routers and Switches Restart COBIT: DB2 Database Configuration Changes COBIT: DB2 Database Stop and Start Events COBIT: Domain activities on Symantec Endpoint Protection COBIT: F5 BIG-IP TMOS Restarted |
| AI6.1 | Change Standards and Procedures | Compliance Suite Reports
(Cont.)
COBIT: Guardium SQL Guard Audit Configuration Changes COBIT: Guardium SQL Guard Audit Startup or Shutdown COBIT: Guardium SQL Guard Configuration Changes COBIT: Guardium SQL Guard Startup or Shutdown COBIT: HP NonStop Audit Configuration Changes COBIT: i5/OS Audit Configuration Changes COBIT: i5/OS System Management Changes COBIT: Juniper Firewall Reset Accepted COBIT: Juniper Firewall Reset Imminent COBIT: Juniper Firewall Restarted COBIT: LogLogic DSM Configuration Changes COBIT: LogLogic DSM Startup or Shutdown COBIT: LogLogic Management Center Upgrade Success COBIT: LogLogic Universal Collector Configuration Changes COBIT: Microsoft Operations Manager - Windows Servers Restarted COBIT: Microsoft SQL Server Configuration Changes COBIT: Microsoft SQL Server Shutdown by Reason COBIT: Oracle Database Configuration Changes COBIT: Oracle Database Shutdown COBIT: Peer Servers and Status COBIT: Peer Servers and Status - Blue Coat Proxy COBIT: Peer Servers and Status - Cisco WSA COBIT: Peer Servers and Status - Microsoft IIS COBIT: Periodic Review of Log Reports COBIT: Periodic Review of User Access Logs COBIT: RACF Process Started COBIT: Sidewinder Configuration Changes COBIT: Sybase ASE Database Configuration Changes COBIT: Sybase ASE Database Startup or Shutdown COBIT: Symantec AntiVirus: Updated COBIT: Symantec Endpoint Protection Configuration Changes COBIT: Symantec Endpoint Protection: Updated |
| AI6.1 | Change Standards and Procedures | Compliance Suite Reports
(Cont.)
COBIT: Trusted Domain Created on Windows Servers COBIT: Trusted Domain Deleted on Windows Servers COBIT: Windows New Services Installed COBIT: Windows Servers Restarted COBIT: Windows Software Update Activities COBIT: Windows Software Update Failures COBIT: Windows Software Update Successes Compliance Suite Alerts COBIT: Check Point Policy Changed COBIT: Cisco ISE, ACS Configuration Changed COBIT: Guardium SQL Guard Config Changes COBIT: Guardium SQL Guard Startup or Shutdown COBIT: HP NonStop Audit Configuration Changed COBIT: i5/OS Software Updates COBIT: LogLogic DSM Configuration Changes COBIT: LogLogic DSM Startup or Shutdown COBIT: LogLogic Management Center Upgrade Succeeded COBIT: LogLogic Universal Collector Configuration Changed COBIT: RACF Process Started COBIT: Sidewinder Configuration Changed COBIT: Sybase ASE Database Config Changes COBIT: Sybase ASE Database Started COBIT: Sybase ASE Database Stopped COBIT: Symantec Endpoint Protection Configuration Changed COBIT: Windows Software Updates COBIT: Windows Software Updates Failed COBIT: Windows Software Updates Succeeded |
| DS1 Define and Manage Service Levels | ||
| DS1.5 | Monitoring and Reporting of Service Level Achievements | Compliance Suite Reports
COBIT: Cisco Line Protocol Status Changes COBIT: Cisco Link Status Changes COBIT: Cisco Peer Reset/Reload COBIT: Cisco Peer Supervisor Status Changes |
| DS1.5 | Monitoring and Reporting of Service Level Achievements | Compliance Suite Reports
(Cont.)
COBIT: Cisco PIX, ASA, FWSM Failover Disabled COBIT: Cisco PIX, ASA, FWSM Failover Performed COBIT: Cisco Routers and Switches Restart COBIT: DB2 Database Stop and Start Events COBIT: DHCP Granted/Renewed Activities on Microsoft DHCP COBIT: DHCP Granted/Renewed Activities on VMware vShield COBIT: DNS Server Error COBIT: F5 BIG-IP TMOS Restarted COBIT: Failed Windows Events Summary COBIT: Guardium SQL Guard Audit Startup or Shutdown COBIT: Guardium SQL Guard Startup or Shutdown COBIT: Juniper Firewall Reset Accepted COBIT: Juniper Firewall Reset Imminent COBIT: Juniper Firewall Restarted COBIT: LogLogic DSM Startup or Shutdown COBIT: Microsoft Operations Manager - Failed Windows Events COBIT: Microsoft Operations Manager - Windows Events Summary COBIT: Microsoft Operations Manager - Windows Servers Restarted COBIT: Microsoft SQL Server Shutdown by Reason COBIT: Oracle Database Shutdown COBIT: Peer Servers and Status COBIT: Peer Servers and Status - Blue Coat Proxy COBIT: Peer Servers and Status - Cisco WSA COBIT: Peer Servers and Status - Microsoft IIS COBIT: Periodic Review of Log Reports COBIT: Periodic Review of User Access Logs COBIT: Sybase ASE Database Startup or Shutdown COBIT: vCenter Orchestrator Virtual Machine Shutdown |
| DS1.5 | Monitoring and Reporting of Service Level Achievements | Compliance Suite Reports
(Cont.)
COBIT: vCenter Orchestrator Virtual Machine Started COBIT: vCenter Shutdown or Restart of ESX Server COBIT: vCenter Virtual Machine Shutdown COBIT: vCenter Virtual Machine Started COBIT: Windows Events Summary COBIT: Windows Servers Restarted Compliance Suite Alerts COBIT: Cisco PIX, ASA, FWSM Failover Disabled COBIT: Cisco PIX, ASA, FWSM Failover Errors COBIT: Cisco PIX, ASA, FWSM Failover Performed COBIT: Cisco PIX, ASA, FWSM NAT Failure COBIT: Cisco PIX, ASA, FWSM Protocol Failure COBIT: System Restarted COBIT: Cisco PIX, ASA, FWSM Routing Failure COBIT: Cisco Switch Device Reload COBIT: Cisco Switch Device Restart COBIT: Cisco Switch HA Failure (ver) COBIT: Cisco Switch Interface Change COBIT: Cisco Switch Interface Down COBIT: Cisco Switch Interface Up COBIT: DB2 Database Started or Stopped COBIT: DNS Server Shutdown COBIT: DNS Server Started COBIT: Guardium SQL Guard Startup or Shutdown COBIT: i5/OS Server or Service Status Change COBIT: Juniper Firewall HA State Change COBIT: Juniper Firewall Peer Missing COBIT: Juniper Firewall System Reset COBIT: LogLogic Disk Full COBIT: LogLogic DSM Startup or Shutdown COBIT: Microsoft Operations Manager - Windows Server RestartedCOBIT: Microsoft SQL Server Shutdown COBIT: NetApp Bad File Handle COBIT: NetApp Filer Disk Failure COBIT: NetApp Filer Disk Missing |
| DS1.5 | Monitoring and Reporting of Service Level Achievements | Compliance Suite Alerts
(Cont.)
COBIT: NetApp Filer File System Full COBIT: Oracle Database Shutdown COBIT: Sybase ASE Database Started COBIT: Sybase ASE Database Stopped COBIT: System Anomalies COBIT: System Restarted COBIT: vCenter Orchestrator Virtual Machine Shutdown COBIT: vCenter Orchestrator Virtual Machine Started COBIT: vCenter Shutdown or Restart ESX COBIT: vCenter Virtual Machine Shutdown COBIT: vCenter Virtual Machine Started COBIT: System Restarted |
| DS2 Manage Third-Party Services | ||
| DS2.4 | Supplier Performance Monitoring | Compliance Suite Reports
COBIT: Cisco PIX, ASA, FWSM Failover Disabled COBIT: Cisco PIX, ASA, FWSM Failover Performed COBIT: Cisco Routers and Switches Restart COBIT: DB2 Database Stop and Start Events COBIT: DNS Server Error COBIT: F5 BIG-IP TMOS Restarted COBIT: Guardium SQL Guard Audit Startup or Shutdown COBIT: Guardium SQL Guard Startup or Shutdown COBIT: Juniper Firewall Reset Accepted COBIT: Juniper Firewall Reset Imminent COBIT: Guardium SQL Guard Audit Startup or Shutdown COBIT: Guardium SQL Guard Startup or Shutdown COBIT: Juniper Firewall Reset Accepted COBIT: Juniper Firewall Reset Imminent COBIT: Juniper Firewall Restarted COBIT: Juniper Firewall VPN Tunnel Status Change COBIT: LogLogic DSM Startup or Shutdown |
| DS2.4 | Supplier Performance Monitoring | Compliance Suite Reports
(Cont.)
COBIT: Microsoft Operations Manager - Windows Servers Restarted COBIT: Microsoft SQL Server Shutdown by Reason COBIT: Oracle Database Shutdown COBIT: Peer Servers and Status COBIT: Peer Servers and Status - Blue Coat Proxy COBIT: Peer Servers and Status - Cisco WSA COBIT: Peer Servers and Status - Microsoft IIS COBIT: Periodic Review of Log Reports COBIT: Periodic Review of User Access Logs COBIT: Sybase ASE Database Startup or Shutdown COBIT: vCenter Orchestrator Virtual Machine Shutdown COBIT: vCenter Orchestrator Virtual Machine Started COBIT: vCenter Shutdown or Restart of ESX Server COBIT: vCenter Virtual Machine Shutdown COBIT: vCenter Virtual Machine Started COBIT: Windows Servers Restarted Compliance Suite Alerts COBIT: Cisco PIX, ASA, FWSM Failover Disabled COBIT: Cisco PIX, ASA, FWSM Failover Errors COBIT: Cisco PIX, ASA, FWSM Failover Performed COBIT: System Restarted COBIT: Cisco PIX, ASA, FWSM VPN Tunnel Creation COBIT: Cisco PIX, ASA, FWSM VPN Tunnel Teardown COBIT: Cisco Switch Device Reload COBIT: Cisco Switch Device Restart COBIT: Cisco Switch HA Failure (ver) COBIT: DB2 Database Started or Stopped COBIT: DNS Server Shutdown COBIT: DNS Server Started COBIT: Guardium SQL Guard Startup or Shutdown COBIT: i5/OS Server or Service Status Change COBIT: Juniper Firewall HA State Change COBIT: Juniper Firewall System Reset |
| DS2.4 | Supplier Performance Monitoring | Compliance Suite Alerts
(Cont.)
COBIT: LogLogic DSM Startup or Shutdown COBIT: Microsoft SQL Server Shutdown COBIT: Microsoft Operations Manager - Windows Server Restarted COBIT: NetApp Filer File System Full COBIT: Oracle Database Shutdown COBIT: Sybase ASE Database Started COBIT: Sybase ASE Database Stopped COBIT: System Anomalies COBIT: System Restarted COBIT: vCenter Orchestrator Virtual Machine Shutdown COBIT: vCenter Orchestrator Virtual Machine Started COBIT: vCenter Shutdown or Restart ESX COBIT: vCenter Virtual Machine Shutdown COBIT: vCenter Virtual Machine Started COBIT: System Restarted |
| DS3 Manage Performance and Capacity | ||
| DS3.5 | Monitoring and Reporting of Performance and Capacity | Compliance Suite Reports
COBIT: Bandwidth Usage by User COBIT: Cisco Line Protocol Status Changes COBIT: Cisco Link Status Changes COBIT: Cisco Peer Reset/Reload COBIT: Cisco Peer Supervisor Status Changes COBIT: Cisco PIX, ASA, FWSM Failover Disabled COBIT: Cisco PIX, ASA, FWSM Failover Performed COBIT: Cisco Routers and Switches Restart COBIT: DB2 Database Stop and Start Events COBIT: DNS Server Error COBIT: F5 BIG-IP TMOS Restarted COBIT: Failed Windows Events Summary COBIT: Guardium SQL Guard Audit Startup or Shutdown COBIT: Guardium SQL Guard Startup or Shutdown COBIT: Juniper Firewall Reset Accepted COBIT: Juniper Firewall Reset Imminent COBIT: Juniper Firewall Restarted |
| DS3.5 | Monitoring and Reporting of Performance and Capacity | Compliance Suite Reports
(Cont.)
COBIT: LogLogic DSM Startup or Shutdown COBIT: Microsoft Operations Manager - Failed Windows Events COBIT: Microsoft Operations Manager - Windows Events Summary COBIT: Microsoft Operations Manager - Windows Servers Restarted COBIT: Microsoft SQL Server Shutdown by Reason COBIT: Oracle Database Shutdown COBIT: Peer Servers and Status COBIT: Peer Servers and Status - Blue Coat Proxy COBIT: Peer Servers and Status - Cisco WSA COBIT: Peer Servers and Status - Microsoft IIS COBIT: Periodic Review of Log Reports COBIT: Periodic Review of User Access Logs COBIT: Sybase ASE Database Startup or Shutdown COBIT: vCenter Orchestrator Virtual Machine Shutdown COBIT: vCenter Orchestrator Virtual Machine Started COBIT: vCenter Shutdown or Restart of ESX Server COBIT: vCenter Virtual Machine Shutdown COBIT: vCenter Virtual Machine Started COBIT: VPN Connection Average Bandwidth COBIT: VPN Connection Average Duration COBIT: VPN Connection Disconnect Reasons COBIT: Windows Events Summary COBIT: Windows Servers Restarted Compliance Suite Alerts COBIT: Cisco PIX, ASA, FWSM Failover Disabled COBIT: Cisco PIX, ASA, FWSM Failover Errors COBIT: Cisco PIX, ASA, FWSM Failover Performed COBIT: Cisco PIX, ASA, FWSM NAT Failure COBIT: Cisco PIX, ASA, FWSM Protocol Failure COBIT: System Restarted COBIT: Cisco PIX, ASA, FWSM Routing Failure |
| DS3.5 | Monitoring and Reporting of Performance and Capacity | Compliance Suite Alerts
(Cont.)
COBIT: Cisco Switch Device Reload COBIT: Cisco Switch HA Failure (ver) COBIT: Cisco Switch Device Restart COBIT: Cisco Switch Interface Change COBIT: Cisco Switch Interface Down COBIT: Cisco Switch Interface Up COBIT: DB2 Database Started or Stopped COBIT: DNS Server Shutdown COBIT: DNS Server Started COBIT: Guardium SQL Guard Startup or Shutdown COBIT: i5/OS Server or Service Status Change COBIT: Juniper Firewall HA State Change COBIT: Juniper Firewall Peer Missing COBIT: Juniper Firewall System Reset COBIT: LogLogic Disk Full COBIT: LogLogic DSM Startup or Shutdown COBIT: Microsoft SQL Server Shutdown COBIT: Microsoft Operations Manager - Windows Server Restarted COBIT: NetApp Bad File Handle COBIT: NetApp Filer Disk Failure COBIT: NetApp Filer Disk Missing COBIT: NetApp Filer File System Full COBIT: Oracle Database Shutdown COBIT: Sybase ASE Database Started COBIT: Sybase ASE Database Stopped COBIT: System Anomalies COBIT: System Restarted COBIT: vCenter Orchestrator Virtual Machine Shutdown COBIT: vCenter Orchestrator Virtual Machine Started COBIT: vCenter Shutdown or Restart ESX COBIT: vCenter Virtual Machine Shutdown COBIT: vCenter Virtual Machine Started COBIT: System Restarted |
| DS4 Ensure Continuous Service | ||
| DS4.1 | IT Continuity Framework | Compliance Suite Reports
COBIT: Files Accessed through Pulse Connect Secure COBIT: Files Accessed on NetApp Filer Audit COBIT: Files Accessed on Servers COBIT: Files Accessed through Juniper SSL VPN (Secure Access) COBIT: Files Accessed through PANOS COBIT: Files Downloaded via Proxy COBIT: Files Downloaded via Proxy - Blue Coat Proxy COBIT: Files Downloaded via Proxy - Cisco WSA COBIT: Files Downloaded via Proxy - Microsoft IIS COBIT: Files Downloaded via the Web COBIT: Files Downloaded via the Web - F5 BIG-IP TMOS COBIT: Files Downloaded via the Web - Microsoft IIS COBIT: Files Uploaded via Proxy COBIT: Files Uploaded via Proxy - Blue Coat Proxy COBIT: Files Uploaded via Proxy - Cisco WSA COBIT: Files Uploaded via Proxy - Microsoft IIS COBIT: Files Uploaded via the Web COBIT: Files Uploaded via the Web - F5 BIG-IP TMOS COBIT: Files Uploaded via the Web - Microsoft IIS COBIT: NetApp Filer Snapshot Error COBIT: NetApp Filer File Activity COBIT: RACF Files Accessed COBIT: vCenter Datastore Events COBIT: vCenter Data Move COBIT: vCenter Orchestrator Datastore Events COBIT: vCenter Orchestrator Data Move Compliance Suite Alerts COBIT: Cisco PIX, ASA, FWSM NAT Failure COBIT: Cisco PIX, ASA, FWSM Protocol Failure COBIT: Cisco PIX, ASA, FWSM Routing Failure COBIT: Neoteris Files Accessed COBIT: NetApp Filer Snapshot Error |
| DS4.1 | IT Continuity Framework | Compliance Suite Alerts
(Cont.)
COBIT: NetApp Filer Unauthorized Mounting COBIT: RACF Files Accessed COBIT: vCenter Datastore Event COBIT: vCenter Data Move COBIT: vCenter Orchestrator Data Move COBIT: vCenter Orchestrator Datastore Events COBIT: Windows Files Accessed |
| DS4.5 | Testing of the IT Continuity Plan | Compliance Suite Reports
COBIT: DB2 Database Backup Failed COBIT: LogLogic Management Center Backup Activities COBIT: LogLogic Management Center Restore Activities COBIT: Microsoft SQL Server Backup Failed COBIT: NetApp Filer Snapshot Error COBIT: Sybase ASE Database Backup and Restoration Compliance Suite Alert COBIT: DB2 Database Backup Failed COBIT: LogLogic Management Center Backed Up or Restored COBIT: Microsoft SQL Server Backup Failed COBIT: Sybase ASE Database Backed Up or Restored |
| DS5 Ensure System Security | ||
| DS5.2 | IT Security Plan | Compliance Suite Reports
COBIT: Files Accessed through Pulse Connect Secure COBIT: Files Accessed on NetApp Filer Audit COBIT: Files Accessed on Servers COBIT: Files Accessed through Juniper SSL VPN (Secure Access) COBIT: Files Accessed through PANOS COBIT: Files Downloaded via Proxy COBIT: Files Downloaded via Proxy - Blue Coat Proxy COBIT: Files Downloaded via Proxy - Cisco WSA COBIT: Files Downloaded via Proxy - Microsoft IIS COBIT: Files Downloaded via the Web COBIT: Files Downloaded via the Web - F5 BIG-IP TMOS COBIT: Files Downloaded via the Web - Microsoft IIS |
| DS5.2 | IT Security Plan | Compliance Suite Reports
(Cont.)
COBIT: Files Uploaded via Proxy COBIT: Files Uploaded via Proxy - Blue Coat Proxy COBIT: Files Uploaded via Proxy - Cisco WSA COBIT: Files Uploaded via Proxy - Microsoft IIS COBIT: Files Uploaded via the Web COBIT: Files Uploaded via the Web - F5 BIG-IP TMOS COBIT: Files Uploaded via the Web - Microsoft IIS COBIT: NetApp Filer File Activity COBIT: RACF Files Accessed COBIT: vCenter Datastore Events COBIT: vCenter Data Move COBIT: vCenter Orchestrator Datastore Events COBIT: vCenter Orchestrator Data Move Compliance Suite Alerts COBIT: Neoteris Files Accessed COBIT: NetApp Filer Unauthorized Mounting COBIT: RACF Files Accessed COBIT: vCenter Datastore Event COBIT: vCenter Data Move COBIT: vCenter Orchestrator Data Move COBIT: vCenter Orchestrator Datastore Events COBIT: Windows Files Accessed |
| DS5.3 | Identity Management (1/4) | Compliance Suite Reports
COBIT: Files Accessed Through Pulse Connect Secure COBIT: Pulse Connect Secure Successful Logins COBIT: Accepted VPN Connections - RADIUS COBIT: Account Activities on Windows Servers COBIT: Accounts Changed on NetApp Filer COBIT: Accounts Changed on Sidewinder COBIT: Accounts Changed on TIBCO Administrator COBIT: Accounts Changed on UNIX Servers COBIT: Accounts Changed on Windows Servers COBIT: Accounts Created on NetApp Filer |
| DS5.3 | Identity Management (1/4) | Compliance Suite Reports
(Cont.)
COBIT: Accounts Created on NetApp Filer Audit COBIT: Accounts Created on Sidewinder COBIT: Accounts Created on Symantec Endpoint Protection COBIT: Accounts Created on TIBCO ActiveMatrix Administrator COBIT: Accounts Created on TIBCO Administrator COBIT: Accounts Created on UNIX Servers COBIT: Accounts Created on Windows Servers COBIT: Check Point Management Station Login COBIT: Cisco ISE, ACS Accounts Created COBIT: DB2 Database Failed Logins COBIT: DB2 Database Successful Logins COBIT: DB2 Database User Additions and Deletions COBIT: Denied VPN Connections - RADIUS COBIT: ESX Accounts Activities COBIT: ESX Accounts Created COBIT: ESX Failed Logins COBIT: ESX Group Activities COBIT: ESX Logins Failed Unknown User COBIT: ESX Logins Succeeded COBIT: F5 BIG-IP TMOS Login Failed COBIT: F5 BIG-IP TMOS Login Successful COBIT: Failed Logins COBIT: Files Accessed on NetApp Filer Audit COBIT: Files Accessed through Juniper SSL VPN (Secure Access) COBIT: Groups Deleted on UNIX Servers COBIT: Groups Deleted on Windows Servers COBIT: Guardium SQL Guard Audit Logins COBIT: Guardium SQL Guard Logins COBIT: Group Activities on NetApp Filer Audit COBIT: Group Activities on Symantec Endpoint Protection COBIT: Group Activities on TIBCO ActiveMatrix Administrator |
| DS5.3 | Identity Management (1/4) | Compliance Suite Reports
(Cont.)
COBIT: HP NonStop Audit Login Failed COBIT: HP NonStop Audit Login Successful COBIT: HP NonStop Audit Object Changes COBIT: HP NonStop Audit Permissions Changed COBIT: i5/OS Network Authentication Events COBIT: i5/OS User Profile Creation, Modification, or Restoration COBIT: Juniper SSL VPN Successful Logins COBIT: Juniper SSL VPN (Secure Access) Successful Logins COBIT: Logins by Authentication Type COBIT: LogLogic DSM Logins COBIT: LogLogic Management Center Account Activities COBIT: LogLogic Management Center Login COBIT: Microsoft Operations Manager - Windows Accounts Activities COBIT: Microsoft Operations Manager - Windows Accounts Changed COBIT: Microsoft Operations Manager - Windows Accounts Created COBIT: Microsoft Operations Manager - Windows Events by Users COBIT: Microsoft Operations Manager - Windows Permissions Modified COBIT: Microsoft Operations Manager - Windows Policies Modified COBIT: Microsoft Sharepoint Permissions Changed COBIT: Microsoft Sharepoint Policy Add, Remove, or Modify COBIT: Microsoft SQL Server Database Failed Logins COBIT: Microsoft SQL Server Database Successful Logins COBIT: NetApp Filer Audit Login Failed COBIT: NetApp Filer Audit Login Successful COBIT: NetApp Filer File Activity COBIT: NetApp Filer Login Failed COBIT: NetApp Filer Login Successful |
| DS5.3 | Identity Management (1/4) | Compliance Suite Reports
(Cont.)
COBIT: Oracle Database Failed Logins COBIT: Oracle Database Successful Logins COBIT: Oracle Database User Additions and Deletions COBIT: RACF Accounts Created COBIT: RACF Accounts Modified COBIT: RACF Failed Logins COBIT: RACF Files Accessed COBIT: RACF Permissions Changed COBIT: RACF Successful Logins COBIT: Successful Logins COBIT: Sybase ASE Database User Additions and Deletions COBIT: Sybase ASE Successful Logins COBIT: Sybase ASE Failed Logins COBIT: TIBCO ActiveMatrix Administrator Failed Logins COBIT: TIBCO ActiveMatrix Administrator Permission Changes COBIT: TIBCO ActiveMatrix Administrator Successful Logins COBIT: TIBCO Administrator Permission Changes COBIT: Unauthorized Logins COBIT: Unencrypted Logins COBIT: UNIX Failed Logins COBIT: Users Created on Servers COBIT: vCenter Datastore Events COBIT: vCenter Data Move COBIT: vCenter Failed Logins COBIT: vCenter Orchestrator Datastore Events COBIT: vCenter Orchestrator Data Move COBIT: vCenter Orchestrator Failed Logins COBIT: vCenter Successful Logins COBIT: vCenter User Permission Change |
| DS5.3 | Identity Management (1/4) | Compliance Suite Reports
(Cont.)
COBIT: vCloud Failed Logins COBIT: vCloud Successful Logins COBIT: vCloud User Created COBIT: VPN Users Accessing Corporate Network COBIT: Windows Accounts Enabled Compliance Suite Alerts COBIT: Accounts Created COBIT: Accounts Enabled COBIT: Accounts Modified COBIT: Cisco PIX, ASA, FWSM Logon Failure COBIT: Cisco PIX, ASA, FWSM Logon Success COBIT: DB2 Database User Added or Dropped COBIT: Guardium SQL Guard Logins COBIT: Groups Created COBIT: Group Members Added COBIT: HP NonStop Audit Permission Changed COBIT: i5/OS Network Profile Changes COBIT: i5/OS Permission or Policy Change COBIT: i5/OS User Profile Changes COBIT: Juniper Firewall Logon Failure COBIT: Juniper Firewall Logon Success COBIT: Logins Succeeded COBIT: Logins Failed COBIT: LogLogic DSM Logins COBIT: Microsoft Operations Manager - Permissions Changed COBIT: Microsoft Operations Manager - Windows Policies Changed COBIT: Microsoft Sharepoint Permission Changed COBIT: Microsoft Sharepoint Policies Added, Removed, Modified COBIT: NetApp Filer Audit Policies Changed COBIT: NetApp Authentication Failure COBIT: NetApp Filer NIS Group Update |
| DS5.3 | Identity Management (1/4) | Compliance Suite Alerts
(Cont.)
COBIT: Oracle Database User Added or Deleted COBIT: RACF Files Accessed COBIT: RACF Permissions Changed COBIT: Symantec Endpoint Protection Policy Add, Delete, Modify COBIT: TIBCO ActiveMatrix Administrator Permission Changed COBIT: UNIX Groups Added COBIT: UNIX Groups Deleted COBIT: UNIX Groups Modified COBIT: vCenter Datastore Event COBIT: vCenter Data Move COBIT: vCenter Orchestrator Data Move COBIT: vCenter Orchestrator Datastore Events COBIT: vCenter Orchestrator Login Failed COBIT: vCenter Permission Change COBIT: vCenter User Login Successful COBIT: vCloud Director Login Success COBIT: vCloud User Created COBIT: vCenter User Login Failed COBIT: vCloud Director Login Failed COBIT: Windows Group Members Added COBIT: Windows Groups Created |
| DS5.3 (2/4) | Identity Management (2/4) | Compliance Suite Reports
COBIT: Account Activities on UNIX Servers COBIT: Account Activities on Windows Servers COBIT: Check Point Management Station Login COBIT: DB2 Database Successful Logins COBIT: Escalated Privilege Activities on Servers COBIT: Files Accessed on Servers COBIT: Group Activities on UNIX Servers COBIT: Group Activities on Windows Servers COBIT: Groups Deleted on TIBCO ActiveMatrix Administrator COBIT: i5/OS Access Control List Modifications COBIT: i5/OS Network Authentication Events COBIT: Juniper Firewall Escalated Privilege COBIT: Juniper SSL VPN Successful Logins COBIT: Juniper SSL VPN (Secure Access) Successful Logins COBIT: Logins by Authentication Type COBIT: Microsoft SQL Server Database Successful Logins COBIT: Oracle Database Successful Logins COBIT: Permissions Modified on Windows Servers COBIT: Policies Modified on Windows Servers COBIT: Successful Logins COBIT: Sybase ASE Successful Logins COBIT: Unauthorized Logins COBIT: Unencrypted Logins COBIT: VPN Users Accessing Corporate Network COBIT: Windows Events by Users COBIT: Windows Programs Accessed |
| DS5.3 (2/4) | Identity Management (2/4) | Compliance Suite Alerts
COBIT: Cisco PIX, ASA, FWSM Logon Success COBIT: Juniper Firewall Logon Success COBIT: Neoteris Files Accessed COBIT: NetApp Filer Unauthorized Mounting COBIT: Logins Succeeded COBIT: UNIX Groups Added COBIT: UNIX Groups Deleted COBIT: UNIX Groups Modified COBIT: UNIX Privilege Escalated COBIT: Windows Files Accessed COBIT: Windows Permissions Changed COBIT: Windows Policies Changed COBIT: Windows Privileges Escalated |
| DS5.3 (3/4) | Identity Management (3/4) | Compliance Suite Reports
COBIT: Accounts Created on UNIX Servers COBIT: Accounts Created on Windows Servers COBIT: Groups Deleted on UNIX Servers COBIT: Groups Deleted on Windows Servers COBIT: i5/OS Access Control List Modifications COBIT: i5/OS User Profile Creation, Modification, or Restoration COBIT: Microsoft SQL Server Database User Additions and Deletions COBIT: Permissions Modified on Windows Servers COBIT: Policies Modified on Windows Servers COBIT: Users Created on Servers COBIT: Windows Accounts Enabled COBIT: Windows Group Members Added |
| DS5.3 (3/4) | Identity Management (3/4) | Compliance Suite Alerts
COBIT: Accounts Enabled COBIT: UNIX Groups Added COBIT: UNIX Groups Deleted COBIT: UNIX Groups Modified COBIT: Windows Groups Created COBIT: Windows Group Members Added COBIT: Windows Policies Changed COBIT: Windows Permissions Changed |
| DS5.3 (4/4) | Identity Management (4/4) | Compliance Suite Reports
COBIT: Account Activities on UNIX Servers COBIT: Account Activities on Windows Servers COBIT: Accounts Created on UNIX Servers COBIT: Accounts Created on Windows Servers COBIT: Check Point Management Station Login COBIT: DB2 Database Successful Logins COBIT: Escalated Privilege Activities on Servers COBIT: Failed Logins COBIT: Files Accessed on Servers COBIT: Files Accessed through PANOS COBIT: Group Activities on UNIX Servers COBIT: Group Activities on Windows Servers COBIT: Groups Deleted on NetApp Filer Audit COBIT: Groups Deleted on UNIX Servers COBIT: Groups Deleted on Windows Servers COBIT: i5/OS Access Control List Modifications COBIT: i5/OS Network Authentication Events COBIT: i5/OS User Profile Creation, Modification, or Restoration COBIT: Juniper Firewall Escalated Privilege COBIT: Juniper SSL VPN Successful Logins COBIT: Juniper SSL VPN (Secure Access) Successful Logins |
| DS5.3 (4/4) | Identity Management (4/4) | Compliance Suite Reports
(Cont.)
COBIT: Logins by Authentication Type COBIT: Microsoft SQL Server Database Failed Logins COBIT: Microsoft SQL Server Database Successful Logins COBIT: NetApp Filer Audit Accounts Enabled COBIT: NetApp Filer Audit Group Members Added COBIT: Oracle Database Successful Logins COBIT: Permissions Modified on Windows Servers COBIT: Policies Modified on Windows Servers COBIT: Successful Logins COBIT: Sybase ASE Failed Logins COBIT: Sybase ASE Successful Logins COBIT: Unauthorized Logins COBIT: Unencrypted Logins COBIT: UNIX Failed Logins COBIT: Users Created on Servers COBIT: VPN Users Accessing Corporate Network COBIT: Windows Accounts Enabled COBIT: Windows Events by Users COBIT: Windows Group Members Added COBIT: Windows Programs Accessed Compliance Suite Alerts COBIT: Accounts Enabled COBIT: Cisco PIX, ASA, FWSM Logon Failure COBIT: Cisco PIX, ASA, FWSM Logon Success COBIT: Juniper Firewall Logon Failure COBIT: Juniper Firewall Logon Success COBIT: Logins Failed COBIT: Logins Succeeded COBIT: Neoteris Files Accessed COBIT: NetApp Authentication Failure COBIT: NetApp Filer NIS Group Update COBIT: NetApp Filer Unauthorized Mounting |
| DS5.3 (4/4) | Identity Management (4/4) | Compliance Suite Alerts
(Cont.)
COBIT: UNIX Groups Added COBIT: UNIX Groups Deleted COBIT: UNIX Groups Modified COBIT: UNIX Privilege Escalated COBIT: Windows Files Accessed COBIT: Windows Groups Created COBIT: Windows Group Members Added COBIT: Windows Permissions Changed COBIT: Windows Policies Changed COBIT: Windows Privileges Escalated |
| DS5.4 | User Account Management | Compliance Suite Reports
COBIT: Account Activities on UNIX Servers COBIT: Account Activities on Windows Servers COBIT: Accounts Created on NetApp Filer COBIT: Accounts Created on NetApp Filer Audit COBIT: Accounts Created on Sidewinder COBIT: Accounts Created on Symantec Endpoint Protection COBIT: Accounts Created on TIBCO ActiveMatrix Administrator COBIT: Accounts Created on TIBCO Administrator COBIT: Accounts Created on UNIX Servers COBIT: Accounts Created on Windows Servers COBIT: Accounts Deleted on NetApp Filer COBIT: Accounts Deleted on NetApp Filer Audit COBIT: Accounts Deleted on Sidewinder COBIT: Accounts Deleted on Symantec Endpoint Protection COBIT: Accounts Deleted on TIBCO ActiveMatrix Administrator COBIT: Accounts Deleted on TIBCO Administrator COBIT: Accounts Deleted on UNIX Servers COBIT: Accounts Deleted on Windows Servers COBIT: Cisco ISE, ACS Accounts Created COBIT: Cisco ISE, ACS Accounts Removed |
| DS5.4 | User Account Management | Compliance Suite Reports
(Cont.)
COBIT: Cisco ISE, ACS Password Changes COBIT: DB2 Database User Additions and Deletions COBIT: ESX Accounts Activities COBIT: ESX Accounts Created COBIT: ESX Accounts Deleted COBIT: ESX Group Activities COBIT: F5 BIG-IP TMOS Password Changes COBIT: Group Activities on NetApp Filer Audit COBIT: Group Activities on Symantec Endpoint Protection COBIT: Group Activities on TIBCO ActiveMatrix Administrator COBIT: Group Activities on UNIX Servers COBIT: Group Activities on Windows Servers COBIT: Groups Created on NetApp Filer Audit COBIT: Groups Created on TIBCO ActiveMatrix Administrator COBIT: Groups Created on UNIX Servers COBIT: Groups Created on Windows Servers COBIT: Groups Deleted on NetApp Filer Audit COBIT: Groups Deleted on TIBCO ActiveMatrix Administrator COBIT: Groups Deleted on UNIX Servers COBIT: Groups Deleted on Windows Servers COBIT: HP NonStop Audit Object Changes COBIT: HP NonStop Audit Permissions Changed COBIT: i5/OS Access Control List Modifications COBIT: i5/OS Audit Configuration Changes COBIT: i5/OS DST Password Reset COBIT: i5/OS Server Security User Information Actions COBIT: i5/OS User Profile Creation, Modification, or Restoration COBIT: LogLogic Management Center Account Activities COBIT: LogLogic Management Center Password Changes |
| DS5.4 | User Account Management | COBIT: Microsoft Operations Manager - Windows Accounts Activities
COBIT: Microsoft Operations Manager - Windows Accounts Created COBIT: Microsoft Operations Manager - Windows Password Changes COBIT: Microsoft Operations Manager - Windows Permissions Modified COBIT: Microsoft Sharepoint Permissions Changed COBIT: Microsoft Sharepoint Policy Add, Remove, or Modify COBIT: Microsoft SQL Server Database User Additions and Deletions COBIT: Microsoft SQL Server Password Changes COBIT: NetApp Filer Audit Group Members Deleted COBIT: NetApp Filer Password Changes COBIT: Oracle Database User Additions and Deletions COBIT: Password Changes on Windows Servers COBIT: Permissions Modified on Windows Servers COBIT: RACF Accounts Created COBIT: RACF Accounts Deleted COBIT: RACF Password Changed COBIT: RACF Permissions Changed COBIT: Sybase ASE Database User Additions and Deletions COBIT: Symantec Endpoint Protection Password Changes COBIT: TIBCO ActiveMatrix Administrator Permission Changes COBIT: TIBCO ActiveMatrix Administrator Permission Changed COBIT: TIBCO Administrator Password Changes COBIT: TIBCO Administrator Permission Changes COBIT: Users Removed from Servers COBIT: vCenter User Permission Change COBIT: vCloud User Created COBIT: vCloud User Deleted or Removed COBIT: Windows Group Members Deleted |
| DS5.4 | User Account Management | Compliance Suite Alerts
COBIT: Accounts Created COBIT: Accounts Deleted COBIT: Accounts Locked COBIT: Cisco ISE, ACS Passwords Changed COBIT: DB2 Database User Added or Dropped COBIT: Groups Created COBIT: Group Members Added COBIT: HP NonStop Audit Permission Changed COBIT: i5/OS Permission or Policy Change COBIT: IBM AIX Password Changed COBIT: LogLogic Management Center Passwords Changed COBIT: Microsoft Operations Manager - Permissions Changed COBIT: Microsoft Operations Manager - Windows Passwords Changed COBIT: Microsoft Sharepoint Permission Changed COBIT: Microsoft Sharepoint Policies Added, Removed, Modified COBIT: Oracle Database User Added or Deleted COBIT: RACF Passwords Changed COBIT: RACF Permissions Changed COBIT: Symantec Endpoint Protection Policy Add, Delete, Modify COBIT: UNIX Groups Added COBIT: vCenter Permission Change COBIT: vCloud User Created COBIT: Windows Groups Created COBIT: Windows Group Members Added COBIT: Windows Passwords Changed COBIT: Windows Permissions Changed |
| DS5.5 | Security Testing, Surveillance, and Monitoring | Compliance Suite Reports
COBIT: Periodic Review of Log Reports COBIT: Periodic Review of User Access Logs |
| DS5.7 | Protection of Security Technology | Compliance Suite Reports
COBIT: Decru DataFort Zeroization Events COBIT: Tripwire Modifications, Additions, and Deletions |
| DS5.8 | Cryptographic Key Management | Compliance Suite Reports
COBIT: Check Point SIC Revoked COBIT: Decru DataFort Cryptographic Key Events COBIT: Decru DataFort Zeroization Events COBIT: i5/OS Key Ring File Events |
| DS5.10 | Network Security (1/2) | Compliance Suite Reports
COBIT: Applications Under Attack - FireEye MPS COBIT: Attackers by Service - FireEye MPS COBIT: Attackers by Signature - FireEye MPS COBIT: FireEye MPS - Attackers by Event ID COBIT: FireEye MPS - Attackers by Threat Name COBIT: FireEye MPS - Attacks Detected COBIT: Pulse Connect Secure Successful Logins COBIT: Servers Under Attacks - FireEye MPS COBIT: Source of Attack - FireEye MPS COBIT: Accepted VPN Connections - RADIUS COBIT: Active Connections for Cisco ASA COBIT: Active Connections for Cisco FWSM COBIT: Active Connections for Cisco PIX COBIT: Allowed URLs by Source IPs COBIT: Allowed URLs by Source IPs - F5 BIG-IP TMOS COBIT: Allowed URLs by Source IPs - Microsoft IIS COBIT: Allowed URLs by Source Users COBIT: Allowed URLs by Source Users - F5 BIG-IP TMOS COBIT: Allowed URLs by Source Users - Microsoft IIS COBIT: Applications Under Attack COBIT: Applications Under Attack - Cisco IOS COBIT: Applications Under Attack - ISS SiteProtector COBIT: Applications Under Attack - SiteProtector COBIT: Applications Under Attack - Sourcefire Defense Center COBIT: Attackers by Service COBIT: Attackers by Service - Cisco IOS COBIT: Attackers by Service - ISS SiteProtector COBIT: Attackers by Service - SiteProtector COBIT: Attackers by Service - Sourcefire Defense Center COBIT: Attackers by Signature COBIT: Attackers by Signature - Cisco IOS COBIT: Attackers by Signature - ISS SiteProtector |
| DS5.10 | Network Security (1/2) | Compliance Suite Reports
(Cont.)
COBIT: Attackers by Signature - SiteProtector COBIT: Attackers by Signature - Sourcefire Defense Center COBIT: Attacks Detected COBIT: Attacks Detected - Cisco IOS COBIT: Attacks Detected - HIPS COBIT: Attacks Detected - ISS SiteProtector COBIT: Attacks Detected - Sourcefire Defense Center COBIT: Attacks Detected - SiteProtector COBIT: Blocked URLs by Source IPs COBIT: Blocked URLs by Source IPs - F5 BIG-IP TMOS COBIT: Blocked URLs by Source IPs - Microsoft IIS COBIT: Blocked URLs by Source Users COBIT: Blocked URLs by Source Users - F5 BIG-IP TMOS COBIT: Blocked URLs by Source Users - Microsoft IIS COBIT: Check Point Management Station Login COBIT: Cisco ESA: Attacks by Event ID COBIT: Cisco ESA: Attacks Detected COBIT: Cisco ESA: Attacks by Threat Name COBIT: Cisco ESA: Scans COBIT: DB2 Database Successful Logins COBIT: Denied Connections by IP Addresses - Check Point COBIT: Denied Connections by IP Addresses - Cisco ASA COBIT: Denied Connections by IP Addresses - Cisco FWSM COBIT: Denied Connections by IP Addresses - Cisco PIX COBIT: Denied Connections by IP Addresses - Nortel COBIT: Denied Connections - Cisco IOS COBIT: Denied Connections - Cisco NXOS COBIT: Denied Connections - Cisco Router COBIT: Denied Connections - F5 BIG-IP TMOS COBIT: Denied Connections - Sidewinder COBIT: Denied Connections - VMware vShield COBIT: Denied Inbound Connections - Cisco ASA COBIT: Denied Inbound Connections - Cisco FWSM |
| DS5.10 | Network Security (1/2) | Compliance Suite Reports
(Cont.)
COBIT: Denied Inbound Connections - Cisco PIX COBIT: Denied Inbound Connections - Check Point |
| DS5.10 | Network Security (2/2) | Compliance Suite Reports
(Cont.)
COBIT: Denied Inbound Connections - Juniper Firewall COBIT: Denied Outbound Connections - Check Point COBIT: Denied Outbound Connections - Cisco ASA COBIT: Denied Outbound Connections - Cisco FWSM COBIT: Denied Outbound Connections - Cisco PIX COBIT: Denied Outbound Connections - Juniper Firewall COBIT: ESX Logins Succeeded COBIT: F5 BIG-IP TMOS Login Successful COBIT: FortiOS: Attacks by Event ID COBIT: FortiOS: Attacks by Threat Name COBIT: FortiOS: Attacks Detected COBIT: FortiOS DLP Attacks Detected COBIT: Guardium SQL Guard Audit Logins COBIT: Guardium SQL Guard Logins COBIT: HP NonStop Audit Login Successful COBIT: i5/OS Internet Security Management Events COBIT: Juniper SSL VPN Successful Logins COBIT: Juniper SSL VPN (Secure Access) Successful Logins COBIT: Logins by Authentication Type COBIT: LogLogic DSM Logins COBIT: LogLogic Management Center Login COBIT: McAfee AntiVirus: Attacks by Event ID COBIT: McAfee AntiVirus: Attacks by Threat Name COBIT: McAfee AntiVirus: Attacks Detected COBIT: Microsoft SQL Server Database Successful Logins COBIT: Most Active Ports Through Firewall - Check Point COBIT: Most Active Ports Through Firewall - Cisco ASA COBIT: Most Active Ports Through Firewall - Cisco FWSM COBIT: Most Active Ports Through Firewall - Cisco PIX COBIT: Most Active Ports Through Firewall - Fortinet |
| DS5.10 | Network Security (2/2) | Compliance Suite Reports
(Cont.)
COBIT: Most Active Ports Through Firewall - Juniper Firewall COBIT: Most Active Ports Through Firewall - Nortel COBIT: NetApp Filer Audit Login Successful COBIT: NetApp Filer Login Successful COBIT: Network Traffic per Rule - Check Point COBIT: Network Traffic per Rule - Juniper Firewall COBIT: Network Traffic per Rule - Nortel COBIT: Oracle Database Successful Logins COBIT: PANOS: Attacks by Event ID COBIT: PANOS: Attacks by Threat Name COBIT: PANOS: Attacks Detected COBIT: Ports Allowed Access - Check Point COBIT: Ports Allowed Access - Cisco ASA COBIT: Ports Allowed Access - Cisco IOS COBIT: Ports Allowed Access - Cisco FWSM COBIT: Ports Allowed Access - Cisco Netflow COBIT: Ports Allowed Access - Cisco PIX COBIT: Ports Allowed Access - F5 BIG-IP TMOS COBIT: Ports Allowed Access - Fortinet COBIT: Ports Allowed Access - Juniper JunOS COBIT: Ports Allowed Access - Juniper Firewall COBIT: Ports Allowed Access - Juniper RT Flow COBIT: Ports Allowed Access - Nortel COBIT: Ports Allowed Access - PANOS COBIT: Ports Allowed Access - Sidewinder COBIT: Ports Allowed Access - VMware vShield COBIT: Ports Denied Access - Check Point COBIT: Ports Denied Access - Cisco ASA COBIT: Ports Denied Access - Cisco FWSM COBIT: Ports Denied Access - Cisco IOS COBIT: Ports Denied Access - Cisco PIX COBIT: Ports Denied Access - Cisco Router COBIT: Ports Denied Access - F5 BIG-IP TMOS COBIT: Ports Denied Access - Fortinet |
| DS5.10 | Network Security (2/2) | Compliance Suite Reports
(Cont.)
COBIT: Ports Denied Access - Juniper JunOS COBIT: Ports Denied Access - Juniper Firewall COBIT: Ports Denied Access - Juniper RT Flow COBIT: Ports Denied Access - Nortel COBIT: Ports Denied Access - PANOS COBIT: Ports Denied Access - Sidewinder COBIT: Ports Denied Access - VMware vShield COBIT: RACF Successful Logins COBIT: Servers Under Attack COBIT: Servers Under Attack - Cisco IOS COBIT: Servers Under Attack - HIPS COBIT: Servers Under Attack - ISS SiteProtector COBIT: Servers Under Attack - SiteProtector COBIT: Servers Under Attack - Sourcefire Defense Center COBIT: Source of Attacks COBIT: Source of Attacks - Cisco IOS COBIT: Source of Attacks - HIPS COBIT: Source of Attacks - ISS SiteProtector COBIT: Source of Attacks - SiteProtector COBIT: Source of Attacks - Sourcefire Defense Center COBIT: Sybase ASE Successful Logins COBIT: Symantec AntiVirus: Attacks by Threat Name COBIT: Symantec AntiVirus: Attacks Detected COBIT: Symantec AntiVirus: Scans COBIT: Symantec Endpoint Protection: Attacks Detected COBIT: Symantec Endpoint Protection: Attacks by Threat Name COBIT: Symantec Endpoint Protection: Scans COBIT: Successful Logins COBIT: TIBCO ActiveMatrix Administrator Permission Changes COBIT: TrendMicro Control Manager: Attacks Detected COBIT: TrendMicro Control Manager: Attacks Detected by Threat Name |
| DS5.10 | Network Security (2/2) | Compliance Suite Reports
(Cont.)
COBIT: TrendMicro OfficeScan: Attacks Detected COBIT: TrendMicro OfficeScan: Attacks Detected by Threat Name COBIT: Unencrypted Logins COBIT: Unencrypted Network Services - Check Point COBIT: Unencrypted Network Services - Cisco ASA COBIT: Unencrypted Network Services - Cisco FWSM COBIT: Unencrypted Network Services - Cisco IOS COBIT: Unencrypted Network Services - Cisco Netflow COBIT: Unencrypted Network Services - Cisco PIX COBIT: Unencrypted Network Services - F5 BIG-IP TMOS COBIT: Unencrypted Network Services - Fortinet COBIT: Unencrypted Network Services - Juniper Firewall COBIT: Unencrypted Network Services - Juniper JunOS COBIT: Unencrypted Network Services - Juniper RT Flow COBIT: Unencrypted Network Services - Nortel COBIT: Unencrypted Network Services - PANOS COBIT: Unencrypted Network Services - Sidewinder COBIT: Unencrypted Network Services - VMware vShield COBIT: Users Using the Proxies COBIT: Users Using the Proxies - Blue Coat Proxy COBIT: Users Using the Proxies - Cisco WSA COBIT: Users Using the Proxies - Microsoft IIS COBIT: vCenter Successful Logins COBIT: vCloud Successful Logins COBIT: VPN Connections by Users COBIT: VPN Sessions by Destination IPs COBIT: VPN Sessions by Source IPs COBIT: VPN Sessions by Users COBIT: VPN Denied Connections by Users COBIT: Web Access from All Users COBIT: Web Access from All Users - Fortinet COBIT: Web Access from All Users - PANOS COBIT: Web Access to Applications |
| DS5.10 | Network Security (2/2) | Compliance Suite Reports
(Cont.)
COBIT: Web Access to Applications - F5 BIG-IP TMOS COBIT: Web Access to Applications - Microsoft IIS COBIT: Web Access to Applications - Fortinet COBIT: Web Access to Applications - PANOS COBIT: Web Access from All Users - F5 BIG-IP TMOS COBIT: Web Access from All Users - Microsoft IIS COBIT: Web URLs Visited COBIT: Web URLs Visited - F5 BIG-IP TMOS COBIT: Web URLs Visited - Fortinet COBIT: Web URLs Visited - Microsoft IIS COBIT: Web URLs Visited - PANOS COBIT: Web URLs Visited via Proxy COBIT: Web URLs Visited via Proxy - Blue Coat Proxy COBIT: Web URLs Visited via Proxy - Cisco WSA COBIT: Web URLs Visited via Proxy - Microsoft IIS Compliance Suite Alerts COBIT: Active Directory Changes COBIT: Cisco PIX, ASA, FWSM Logon Success COBIT: Disallowed Services COBIT: Guardium SQL Guard Logins COBIT: Juniper Firewall Logon Success COBIT: Logins Succeeded |
| DS5.10 | Network Security (2/2) | Compliance Suite Alerts
(Cont.)
COBIT: LogLogic DSM Logins COBIT: Excessive IDS Attack COBIT: vCenter User Login Successful COBIT: vCloud Director Login Success |
| DS9 Manage the Configuration | ||
| DS9.3 | Configuration Integrity Review | Compliance Suite Reports
COBIT: Check Point Management Station Login COBIT: Cisco PIX, ASA, FWSM Policy Changed COBIT: Cisco Switch Policy Changes COBIT: Pulse Connect Secure Policy Changed COBIT: Pulse Connect Secure Successful Logins |
| DS9.3 | Configuration Integrity Review | Compliance Suite Reports
(Cont.)
COBIT: DB2 Database Successful Logins COBIT: ESX Kernel log daemon terminating COBIT: ESX Kernel logging Stop COBIT: ESX Logins Succeeded COBIT: ESX Syslogd Restart COBIT: F5 BIG-IP TMOS Login Successful COBIT: Guardium SQL Guard Audit Logins COBIT: Guardium SQL Guard Logins COBIT: HP NonStop Audit Login Successful COBIT: Juniper Firewall Policy Changed COBIT: Juniper SSL VPN (Secure Access) Policy Changed COBIT: Juniper SSL VPN (Secure Access) Successful Logins COBIT: Juniper SSL VPN Successful Logins COBIT: Logins by Authentication Type COBIT: LogLogic DSM Logins COBIT: LogLogic Management Center Login COBIT: Microsoft SQL Server Database Successful Logins COBIT: Microsoft SQL Server Schema Corruption COBIT: NetApp Filer Audit Login Successful COBIT: NetApp Filer Audit Policies Modified COBIT: NetApp Filer Login Successful COBIT: Oracle Database Successful Logins COBIT: RACF Successful Logins COBIT: Successful Logins COBIT: Sybase ASE Successful Logins COBIT: Symantec Endpoint Protection Policy Add, Remove, or Modify COBIT: TIBCO ActiveMatrix Administrator Successful Logins COBIT: Tripwire Modifications, Additions, and Deletions COBIT: Unencrypted Logins COBIT: vCenter Change Attributes COBIT: vCenter Orchestrator Change Attributes COBIT: vCenter Orchestrator Virtual Machine Created |
| DS9.3 | Configuration Integrity Review | Compliance Suite Reports
(Cont.)
COBIT: vCenter Orchestrator Virtual Machine Deleted COBIT: vCenter Modify Firewall Policy COBIT: vCenter Orchestrator vSwitch Added, Changed or Removed COBIT: vCenter Resource Usage Change COBIT: vCenter Restart ESX Services COBIT: vCenter Successful Logins COBIT: vCenter Virtual Machine Created COBIT: vCenter Virtual Machine Deleted COBIT: vCenter vSwitch Added, Changed or Removed COBIT: vCloud Organization Created COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud Successful Logins COBIT: vCloud vApp Created, Modified, or Deleted COBIT: vCloud vDC Created, Modified, or Deleted COBIT: vShield Edge Configuration Changes COBIT: Windows Programs Accessed Compliance Suite Alerts COBIT: Cisco PIX, ASA, FWSM Logon Success COBIT: Cisco PIX, ASA, FWSM Policy Changed COBIT: Cisco Switch Policy Changed COBIT: Guardium SQL Guard Logins COBIT: Juniper Firewall Policy Changes COBIT: Juniper Firewall Logon Success COBIT: Juniper Firewall Policy Out of Sync COBIT: Juniper VPN Policy Change COBIT: Logins Succeeded COBIT: LogLogic DSM Logins COBIT: Microsoft Operations Manager - Windows Policies Changed COBIT: Pulse Connect Secure Policy Change COBIT: NetApp Filer Audit Policies Changed COBIT: vCenter Create Virtual Machine COBIT: vCenter Delete Virtual Machine COBIT: vCenter Firewall Policy Change |
| DS9.3 | Configuration Integrity Review | Compliance Suite Alerts
(Cont.)
COBIT: vCenter Orchestrator vSwitch Add, Modify or Delete COBIT: vCenter Orchestrator Create Virtual Machine COBIT: vCenter Orchestrator Delete Virtual Machine COBIT: vCenter Restart ESX Services COBIT: vCenter User Login Successful COBIT: vCenter vSwitch Add, Modify or Delete COBIT: vCloud Director Login Success COBIT: vCloud Organization Created COBIT: vCloud Organization Deleted COBIT: vCloud Organization Modified COBIT: vCloud vApp Created, Deleted, or Modified COBIT: vCloud vDC Created, Modified, or Deleted COBIT: vShield Edge Configuration Change COBIT: Windows Policies Changed COBIT: Windows Programs Accessed |
| DS10 Manage Problems | ||
| DS10.2 | Problem Tracking and Resolution | Compliance Suite Reports
COBIT: DHCP Granted/Renewed Activities on Microsoft DHCP COBIT: DHCP Granted/Renewed Activities on VMware vShield COBIT: LogLogic File Retrieval Errors COBIT: LogLogic Message Routing Errors Compliance Suite Alert COBIT: LogLogic Message Routing Errors COBIT: LogLogic File Retrieval Errors |
| DS11 Manage Data | ||
| DS11.2 | Storage and Retention Arrangements | Compliance Suite Reports
COBIT: DB2 Database Backup Failed COBIT: i5/OS Restore Events COBIT: LogLogic Management Center Backup Activities |
| DS11.2 | Storage and Retention Arrangements | Compliance Suite Reports
(Cont.)
COBIT: LogLogic Management Center Restore Activities COBIT: Microsoft SQL Server Backup Failed COBIT: NetApp Filer Snapshot Error COBIT: Sybase ASE Database Backup and Restoration Compliance Suite Alert COBIT: DB2 Database Backup Failed COBIT: LogLogic Management Center Backed Up or Restored COBIT: Microsoft SQL Server Backup Failed COBIT: NetApp Filer Snapshot Error COBIT: Sybase ASE Database Backed Up or Restored |
| DS11.5 | Backup and Restoration | Compliance Suite Reports
COBIT: DB2 Database Backup Failed COBIT: DB2 Database Restore Failed COBIT: i5/OS Restore Events COBIT: LogLogic Management Center Backup Activities COBIT: LogLogic Management Center Restore Activities COBIT: Microsoft SQL Server Backup Failed COBIT: Microsoft SQL Server Restore Failed COBIT: NetApp Filer Snapshot Error COBIT: Sybase ASE Database Backup and Restoration Compliance Suite Alerts COBIT: DB2 Database Backup Failed COBIT: DB2 Database Restore Failed COBIT: LogLogic Management Center Backed Up or Restored COBIT: Microsoft SQL Server Backup Failed COBIT: Microsoft SQL Server Restore Failed COBIT: NetApp Filer Snapshot Error COBIT: Sybase ASE Database Backed Up or Restored |
| DS11.6 | Security Requirements for Data Management | Compliance Suite Reports
COBIT: Active Directory System Changes COBIT: Microsoft Operations Manager - Windows Policies Modified COBIT: Policies Modified on Windows Servers COBIT: Ports Allowed Access - Check Point COBIT: Ports Allowed Access - Cisco ASA COBIT: Ports Allowed Access - Cisco FWSM COBIT: Ports Allowed Access - Cisco IOS COBIT: Ports Allowed Access - Cisco Netflow COBIT: Ports Allowed Access - Cisco PIX COBIT: Ports Allowed Access - F5 BIG-IP TMOS COBIT: Ports Allowed Access - Fortinet COBIT: Ports Allowed Access - Juniper Firewall COBIT: Ports Allowed Access - Juniper JunOS COBIT: Ports Allowed Access - Juniper RT Flow COBIT: Ports Allowed Access - Nortel COBIT: Ports Allowed Access - PANOS COBIT: Ports Allowed Access - Sidewinder COBIT: Ports Allowed Access - VMware vShield COBIT: Unencrypted Network Services - Check Point COBIT: Unencrypted Network Services - Cisco ASA COBIT: Unencrypted Network Services - Cisco FWSM COBIT: Unencrypted Network Services - Cisco IOS COBIT: Unencrypted Network Services - Cisco Netflow COBIT: Unencrypted Network Services - Cisco PIX COBIT: Unencrypted Network Services - F5 BIG-IP TMOS COBIT: Unencrypted Network Services - Fortinet COBIT: Unencrypted Network Services - Juniper Firewall COBIT: Unencrypted Network Services - Juniper JunOS COBIT: Unencrypted Network Services - Juniper RT Flow COBIT: Unencrypted Network Services - Nortel COBIT: Unencrypted Network Services - PANOS COBIT: Unencrypted Network Services - Sidewinder COBIT: Unencrypted Network Services - VMware vShield |
| DS13 Manage Operations | ||
| DS13.3 | IT Infrastructure Monitoring | Compliance Suite Reports
COBIT: LogLogic File Retrieval Errors COBIT: LogLogic Message Routing Errors COBIT: NetApp Filer Audit Logs Cleared COBIT: Periodic Review of Log Reports COBIT: Periodic Review of User Access Logs COBIT: Windows Audit Logs Cleared Compliance Suite Alert COBIT: LogLogic Message Routing Errors COBIT: LogLogic File Retrieval Errors COBIT: Windows Audit Log Cleared |