The Network Administrator Work Instruction should describe the following:
- Monitoring logs against predefined events in order to identify potential security incidents.
A regular review of database logs should be performed. In addition, evidence of the review and approval should be prepared and maintained for reference.
OS logs review evidence and approval should be prepared and maintained for reference.