Security Logging and Monitoring   Servicer Sample Clauses

Security Logging and Monitoring   Servicer must utilize logging and monitoring controls for all Servicer Systems:

Security Logging and Monitoring   Servicer must utilize logging and monitoring controls for all Servicer Systems: a. Servicer must maintain electronic logs of all access to Cellco Highly Confidential Information, depicting the details of the access, as well as general logs related to systems housing Cellco Confidential Information and user access to systems. The approach to creating, maintaining and analyzing these electronic logs should be materially similar to NIST SP 800-92. b. At a minimum logs shall capture sufficient information to identify specific personnel accessing data, time stamps, and specific data accessed for all access to Cellco Highly Confidential Information. c. Logs shall be regularly (with the period commensurate with risk) reviewed by Servicer, either manually or using log parsing tools. d. Servicer Systems must generate event logs for the following events at a minimum: i. User systems access events (logons, logoffs, authentication failures), ii. Additions, Deletions and Changes in user accounts and permissions, iii. Mass data modification, movement, deletion, and iv. Events related to system and log integrity, including malware detection e. Logs must be retained for a minimum of six (6) months. f. Logs must be protected from unauthorized access, modification and accidental or deliberate destruction. g. Log reviews must be undertaken by a designated trained individual or group of individuals, manually or through the use of tools, in order to detect unauthorized activity. Cellco Private