TMA-POWERPLATFORM-4.2
Ensure 'Environment Activity logging is Enabled'
Описание
Activity logging track changes to organizational data and maintain a log of those changes. Enabling Power Platform Activity logging helps the security teams to investigate activities for regular security operational or forensic purposes. The auditing feature is designed to meet the auditing, compliance, security, and governance policies of many regulated enterprises.
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
Verify that the Environment Activity logging is Enabled. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Click Settings at the top of the window. 3. Expand Audit and logs then select Audit settings. 4. Ensure the following are set: a. Start Auditing b. Log access c. Read logs 5. Ensure that the retention for logs to the appropriate timeframe according to organizational policy.
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
Ensure that the Environment Activity logging is Enabled. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings at the top of the window. 3. Expand Audit and logs then select Audit settings. 4. Select the following: - Start Auditing - Log access - Read logs 5. Set the retention for logs to the appropriate timeframe according to organizational policy. 6. Click Save. Note: Logs are found in the Security and Compliance Center
Свойства
- Операционные системы
- Любая
- Теги
- loggingpower-platformsaas
- Источник
- CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 4.2 Ensure 'Environment Activity logging is Enabled'