|
The Federal Information Security Management Act (FISMA) requires that all federal agencies document and implement controls for information technology systems that support their operations and assets. Standards and guidelines have been developed and published by the National Institute of Standards and Technology (NIST). These published guidelines cover many areas surrounding “access control”, “audit and accountability”, “incident response”, and “system and information integrity”. Each agency is responsible for implementing the minimum security requirements as outlined by NIST. Agencies are periodically scored to determine their compliance level. Results are presented to Congress. Poor performance can result in penalties and be of general embarrassment to agency management and staff.
The collection, management, and analysis of log data is integral to meeting many FISMA requirements. The use of LogRhythm directly meets some requirements and decreases the cost of complying with others. IT environments consist of heterogeneous devices, systems, and applications - all reporting log data. Millions of individual log entries can be generated daily if not hourly. The task of organizing this information can be overwhelming in itself. The additional requirements of analyzing and reporting on log data render manual processes or homegrown remedies inadequate and costly.
LogRhythm can help. Log collection, archive, and recovery is fully automated across the entire IT infrastructure. LogRhythm automatically performs the first level of log analysis. Log data is categorized, identified, and normalized for easy analysis and reporting. LogRhythm’s powerful alerting capability automatically identifies the most critical issues and notifies relevant personnel. With the click of a mouse, LogRhythm’s out-of-the box FISMA reporting packages ensure you meet your reporting requirements.
FISMA and its “17 minimum security requirements” require organizations implement and perform procedures to effectively “capture”, “monitor”, “review”, and “retain” log data. The remainder of this paper lists the applicable FISMA control requirements, as specified in NIST 800-53, that LogRhythm helps address. For each requirement, an explanation of how LogRhythm supports compliance is provided. Learn how LogRhythm’s comprehensive log management and analysis solution can help your organization meet or exceed FISMA regulatory requirements.
|
