ASVS Requirement 16.1.1
- Level: 2
- Chapter: V16 Security Logging and Error Handling
- Section: V16.1 Security Logging Documentation
- Source: 0x25-V16-Security-Logging-and-Error-Handling.md
Description
Verify that an inventory exists documenting the logging performed at each layer of the application's technology stack, what events are being logged, log formats, where that logging is stored, how it is used, how access to it is controlled, and for how long logs are kept.