M-26-14, Ensuring Effective and Efficient Agency Logging and Network Visibility to Defend Against Evolving Cyber Threats

Summary

Replaces M-21-31 with logging rules aimed at real-time detection and later investigation, requiring agency logging plans within 90 days of a CISA reference architecture and logs kept searchable for six months and retrievable for one year.

Read it on www.whitehouse.gov

Topics

• Logging and monitoring
• Incident response

Replaces

• M-21-31, Improving the Federal Government's Investigative and Remediation Capabilities Related to Cybersecurity Incidents (rescinded)

What FedXchange has recorded

No changes recorded. The watch records a new document and any change in its status.