[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:cis\u002F8":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"cis","8","Control 8","Audit Log Management",740,"Center for Internet Security (CIS)","**What it asks for.** This control expects organisations to collect, review and retain audit logs that can help detect, understand and recover from an attack. It covers deciding what to log, keeping time synchronised, storing logs centrally and retaining them long enough.\n\n**In practice.** There is a logging standard that names required sources and event types, such as authentication, privilege use, DNS and command line activity, with logs forwarded to a central platform protected from tampering. Clocks are synchronised, retention meets both investigation and legal needs, and logs are actually reviewed through alerting and periodic analysis. Evidence includes the logging standard, source coverage lists, retention settings and records of reviews.\n\n**Common gaps.** Logs are frequently collected but never reviewed, or key sources such as cloud control planes and SaaS audit logs are missing. Retention is often too short to support investigations of intrusions discovered months later.",null,"https:\u002F\u002Fwww.cisecurity.org\u002Fcontrols\u002Faudit-log-management","Read the control at CIS","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"cross-jurisdictional-law-enforcement-surveillance-of-political-activists-raises-civil-liberties-alar","Cross-Jurisdictional Law Enforcement Surveillance of Political Activists Raises Civil Liberties Alarms","2026-10-16T20:20:31.596+00:00",{"slug":23,"title":24,"published_at":25},"ai-model-misappropriates-third-party-crypto-funds-to-complete-task","AI Model Misappropriates Third-Party Crypto Funds to Complete Task","2026-10-16T16:20:58.749+00:00",{"slug":27,"title":28,"published_at":29},"spanish-cycling-federation-fined-4800-after-two-month-data-breach-exposing-261965-records","Spanish Cycling Federation Fined €4,800 After Two-Month Data Breach Exposing 261,965 Records","2026-10-16T16:20:43.825+00:00",{"slug":31,"title":32,"published_at":33},"burger-king-japan-app-breach-exposes-11m-member-records","Burger King Japan App Breach Exposes 11M Member Records","2026-10-16T12:21:23.341+00:00",{"slug":35,"title":36,"published_at":37},"ai-models-act-autonomously-to-bypass-auth-and-raid-crypto-wallets","AI Models Act Autonomously to Bypass Auth and Raid Crypto Wallets","2026-10-16T12:21:09.736+00:00",{"slug":39,"title":40,"published_at":41},"chinese-apt-exploits-beyondtrust-zero-day-to-harvest-credentials-and-exfiltrate-data","Chinese APT Exploits BeyondTrust Zero-Day to Harvest Credentials and Exfiltrate Data","2026-10-16T12:20:53.961+00:00",{"slug":43,"title":44,"published_at":45},"uk-legal-aid-agency-breach-exposes-47-years-of-sensitive-records","UK Legal Aid Agency Breach Exposes 47 Years of Sensitive Records","2026-10-15T16:20:35.876+00:00",{"slug":47,"title":48,"published_at":49},"international-csam-crackdown-highlights-platform-accountability-and-reporting-gaps","International CSAM Crackdown Highlights Platform Accountability and Reporting Gaps","2026-10-15T12:20:23.726+00:00",{"slug":51,"title":52,"published_at":53},"centerpoint-energy-breach-exposes-1m-texans-pii-via-cybercrime-forum-disclosure","CenterPoint Energy Breach Exposes 1M+ Texans' PII via Cybercrime Forum Disclosure","2026-10-15T10:20:22.506+00:00",{"slug":55,"title":56,"published_at":57},"unauthorised-ai-agent-actions-expose-gaps-in-governance-and-oversight","Unauthorised AI Agent Actions Expose Gaps in Governance and Oversight","2026-10-14T18:22:00.668+00:00",{"slug":59,"title":60,"published_at":61},"shadow-ai-on-endpoints-creates-hidden-risk-and-data-exposure","Shadow AI on Endpoints Creates Hidden Risk and Data Exposure","2026-10-13T12:22:02.053+00:00",{"slug":63,"title":64,"published_at":65},"ai-coding-agents-require-dedicated-endpoint-visibility-and-forensic-controls","AI Coding Agents Require Dedicated Endpoint Visibility and Forensic Controls","2026-10-12T12:21:09.449+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",299,{"slug":73,"name":74,"problem":75,"stories":76},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",167,{"slug":78,"name":79,"problem":80,"stories":81},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",151,{"slug":83,"name":84,"problem":85,"stories":86},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",102,{"slug":88,"name":89,"problem":90,"stories":91},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",97,{"slug":93,"name":94,"problem":95,"stories":96},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",83,[98,103,109,115,120,125,130,134],{"family":5,"item":99,"code":100,"title":101,"together":102},"6","Control 6","Access Control Management",362,{"family":104,"item":105,"code":106,"title":107,"together":108},"nist-800-53","ac-2","AC-2","Account Management",291,{"family":110,"item":111,"code":112,"title":113,"together":114},"gdpr","32","Article 32","Security of processing",265,{"family":104,"item":116,"code":117,"title":118,"together":119},"ac-6","AC-6","Least Privilege",236,{"family":121,"item":122,"code":123,"title":123,"together":124},"itil","overview","ITIL",227,{"family":5,"item":126,"code":127,"title":128,"together":129},"3","Control 3","Data Protection",189,{"family":104,"item":131,"code":132,"title":133,"together":129},"si-4","SI-4","System Monitoring",{"family":5,"item":135,"code":136,"title":107,"together":137},"5","Control 5",173]