Control Objectives: Logging, Monitoring, Threat Detection, and Analytics

Enable automated security and configuration monitoring of cloud environments to help detect potential threats and vulnerabilities to data or systems in the cloud.

For high-risk solutions or when processing personal data, logging and incident management processes must be implemented to reliably capture, identify, contain and report security & privacy-related incidents.In order to identify fraudulent access or abusive use of Roche systems and/or data (including

Remote sessions should be recorded or activities should be logged.

Respective information about the manufacturing system and relevant system stakeholders should be up to date in the OT Asset Inventory (CMDB) in order to enable communication during Incident Response service provision.

For high-risk solutions or when processing personal data, logging and incident management processes must be implemented to reliably capture, identify, contain and report security & privacy-related incidents.In order to identify fraudulent access or abusive use of Roche systems and/or data (including

The manufacturing system and/or network should be covered by the OT Security Monitoring (industrial Intrusion Detection System - IIDS) service according to OT Monitoring Scope requirements defined within the PL ID 24220009 iIDS Monitoring Scoping Model.