Logging must be enabled for administrative activities, logon attempts, data deletions, function changes, security configuration changes, permission changes, and role changes at the application and infrastructure levels so that these activities can be monitored.

Logging should be enabled to monitor activities such as administrative activities, logon attempts, data deletions

— Pyrana Information Security Policy.pdf

at the application and infrastructure level

— Pyrana Information Security Policy.pdf

changes to functions, security configurations, permissions, and roles

— Pyrana Information Security Policy.pdf