Logging and Monitoring Policy

1. Identification and Monitoring of Security Events:

1.1 Utilisation of APM Software:

Uhubs uses APM software and in-house tools to actively identify and monitor security events within applications and underlying infrastructure.

1.2 Continuous Surveillance:

Implement continuous surveillance mechanisms to detect anomalies, potential threats, and performance deviations.

2. Generating Alerts for Stakeholders:

2.1 Automated Alerting System:

Establish an automated alerting system that generates real-time alerts for relevant stakeholders in response to identified security events.

2.2 Escalation Protocols:

Define clear escalation protocols, ensuring alerts reach the appropriate personnel based on the severity of the event.

3. Restricting Log Access for Accountability:

3.1 Role-Based Access Controls:

Implement role-based access controls to restrict log access, ensuring that only authorized personnel can retrieve and analyze logs.

3.2 Audit Trails:

Maintain audit trails for log access, promoting accountability and transparency in log retrieval activities.

4. Comprehensive Logging Framework:

4.1 Structured Logging:

Maintain a comprehensive logging framework that includes structured logs with essential information for effective troubleshooting.

4.2 Inclusion of Key Metadata:

Ensure logs capture key metadata such as timestamp, user, and system details to enhance contextual understanding during log analysis.

5. Pre-mortems for Major Releases:

5.1 Proactive Risk Assessment:

Conduct pre-mortems before major releases to proactively identify potential risks and vulnerabilities.

5.2 Mitigation Planning:

Develop mitigation plans based on pre-mortem insights, addressing identified risks and ensuring a smoother release process.

6. Post-mortems for Major Production Issues:

6.1 Root Cause Analysis:

Conduct post-mortems for any major production issues to perform thorough root cause analysis.

6.2 Continuous Improvement:

Utilize post-mortem findings to implement corrective actions, driving continuous improvement in systems, processes, and incident response capabilities.

7. Regular Evaluation and Update:

7.1 Periodic Review:

Regularly review and update the logging and monitoring policy to align with evolving security standards and technological advancements.

7.2 Training Programs:

Conduct training programs for relevant personnel to ensure awareness of the latest logging and monitoring practices and tools.

8. Regular Policy Review and Updates:

Uhubs places a strong emphasis on the regular review and update of the policy. An annual review process will be in place to assess the plan's alignment with the evolving environment. This commitment ensures that the policy remains current, adaptable, and effective in addressing emerging challenges and maintaining adherence.