Guide to Computer Security Log Management

Published

September 13, 2006

Author(s)

Karen A. Scarfone, Murugiah Souppaya

Abstract

The National Institute of Standards and Technology (NIST) developed this document in furtherance of its statutory responsibilities under the Federal Information security Management Act (FISMA) of 2002, Public Law 107-347. This publication seeks to assist organizations in understanding the need for sound computer security log management. It provides practical, real-world guidance on developing, implementing, and maintaining effective log management practices throughout an enterprise. The guidance in this publication covers several topics, including establishing log management infrastructures, and developing and performing robust log management processes throughout an organization. The publication presents logging technologies from a high-level viewpoint, and it is not a step-by-step guide to implementing or using logging technologies.

Citation

Special Publication (NIST SP) - 800-92

Report Number

800-92

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Download Paper

DOI Link

Keywords

computer security, log management, FISMA, log management

Citation

Scarfone, K. and Souppaya, M. (2006), Guide to Computer Security Log Management, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-92 (Accessed October 2, 2025)