LOG-6 Usage Monitoring

What is LOG-6 Usage Monitoring Control about?

Usage Monitoring control is about using a monitoring tool to collect, analyze, predict, and report on system usage and identify performance issues.

Usage Monitoring control is helpful when an organization wants a control that focuses on the performance of their systems, such as demonstrating that the system is available according to the stated SLA. This control is not mandatory.

Available tools in the marketplace

The following listing is “crowdsourced” from our customer base or from external research. TrustCloud does not personally recommend any of the tools below, as we haven’t used them.

Tools

Zabbix

DataDog

ManageEngine

Available templates

TrustCloud has a curated list of templates, internally or externally sourced, to help you get started. Click on the link for a downloadable version:

• N/A: No template recommendation

Control implementation

The implementation of a monitoring tool is required, and the following should be included:

1. Configuring performance indicators (CPU, disk, memory usage, etc.)
2. Enabling a threshold for alert notifications
3. Set up an alert notification in case the threshold is met.
4. Restricting access to the log

What evidence do auditors look for?

Most auditors, at a minimum, are looking for the below-suggested action:

1. Provide a screenshot of the monitoring tool dashboard showing the performance indicators.
2. Provide a screenshot of the alert notification threshold.
3. Provide a screenshot of the alert notification.

Evidence example

For the suggested action, an example is provided below:

1. Provide a screenshot of the monitoring tool dashboard showing the performance indicators.
   The following screenshot shows the dashboard and the performance being tracked.
   Source
   
2. Provide a screenshot of the alert notification threshold.
   The following screenshot shows the alert notification configuration, demonstrating who will be alerted.
   
   
3. Provide a screenshot of the alert notification.
   The following screenshot shows an alert notification.