-
Feature
-
Resolution: Unresolved
-
Blocker
-
None
-
None
-
None
-
False
-
-
False
Follow Logging guidance linked in description, obtain verification that logs are properly loaded into Splunk, setup monitoring for events of interest. The latest updated SOA guidance on the Source page for SOA includes SEC-MON-REQ-1 (Logging & Monitoring) as one of the 5 ESS controls PSSC has identified as a significant gap across a large number of pipelines systems and applications. PSSC plans to incorporate these five controls in a set of proposals for PSSC 2022-3 initiatives with the goal of implementing remediation efforts to address these specific security gaps across all pipeline systems and applications. Given the severity and scale associated with this control preventing full SOA Compliance, a Conditional SOA may be requested with a remediation plan for this control stating "[Service] will align efforts with future PSSC 2022-3 Initiative