{"id":399,"date":"2022-05-17T07:24:23","date_gmt":"2022-05-17T07:24:23","guid":{"rendered":"https:\/\/robere.co.id\/doloremque-in-dolorem-dolorum-nemo-nesciunt-ea\/"},"modified":"2022-05-17T07:24:23","modified_gmt":"2022-05-17T07:24:23","slug":"peninjauan-log-aktivitas-perlukah","status":"publish","type":"post","link":"https:\/\/robere.dg-apps.com\/id\/peninjauan-log-aktivitas-perlukah\/","title":{"rendered":"Activity Log Review: Is It Necessary?"},"content":{"rendered":"

The Importance of Activity Log Review in Information Security<\/span><\/span>\u00a0<\/span><\/h3>\n

In the era of digitalization, or Industry 4.0, nearly all company activities have been automated using IT applications and systems. This brings positive impacts such as efficiency and accuracy in business processes. However, on the other hand, increased digitalization also elevates the risk of cybercrime. According to data from the Indonesian National Police, 3,429 cybercrime cases were recorded from January to August 2019.<\/span>\u00a0<\/span><\/p>\n

Cybercrime not only originates from external parties but can also occur due to negligence or actions by internal company employees. To mitigate these risks, the Ministry of Communication and Informatics of the Republic of Indonesia mandates electronic system operators to implement ISO\/IEC 27001, as regulated in KOMINFO Ministerial Regulation Number 4 of 2016 concerning Information Security Management Systems.<\/span>\u00a0<\/span><\/p>\n

Activity Log Monitoring in ISO\/IEC 27001<\/span><\/span>\u00a0<\/span><\/h3>\n

One of the primary steps in preventing cybercrime, according to ISO\/IEC 27001, is to monitor system <\/span>activity logs<\/span><\/b>, as stipulated in Annex 12.4. <\/span>Activity logs<\/span><\/b> record all system activities, such as user access, system changes, and incident detection. By regularly monitoring logs, companies can analyze activity trends and identify potential threats before major incidents occur.<\/span>\u00a0<\/span><\/p>\n

Log monitoring can be performed periodically according to organizational needs, for example, once a month or once every three months, depending on the level of risk faced. For instance, a company can detect failed access attempts or discover suspicious firewall activity carried out by unknown users.<\/span>\u00a0<\/span><\/p>\n

Organizational Steps in Activity Log Monitoring<\/span><\/span>\u00a0<\/span><\/h3>\n

For <\/span>optimal<\/span> <\/span>activity log<\/span><\/span> monitoring, organizations need to implement the following steps:<\/span><\/span>\u00a0<\/span><\/p>\n

1. Establish schedules and procedures for activity log monitoring.<\/span><\/span>\u00a0<\/span><\/strong><\/p>\n

2. Protect logs from unauthorized changes<\/span><\/span>, ensuring the security of activity records that include:\u00a0<\/span><\/span>\u00a0<\/span><\/strong><\/p>\n