Logging should be enabled at the application and infrastructure level to monitor administrative activities, logon attempts, data deletions, function changes, security configurations, permissions, and roles so that critical activities are observable.

Logging should be enabled to monitor activities such as administrative activities, logon attempts, data deletions

— Pyrana Information Security Policy.pdf

at the application and infrastructure level

— Pyrana Information Security Policy.pdf

changes to functions, security configurations, permissions, and roles

— Pyrana Information Security Policy.pdf