Free Template Pack

The ISO 27001 Logging & Monitoring Policy Pack

Annex A 8.15, 8.16, and 8.17 are short to read and awkward to evidence: auditors want to see which sources you log, how long you keep them, what you alert on, and that someone actually looked. This pack gives you the four templates that answer those questions in a form you can hand over.

• A logging and monitoring policy template mapped to Annex A 8.15, 8.16, and 8.17
• An event source and retention register covering what you log and for how long
• A monitoring use-case and alert catalogue, so alerting is documented, not tribal
• An audit evidence log that shows reviews were performed, by whom and when