Key Security Events for ISO 27001:2013 Compliance
Account Logon
Credential Validation
Kerberos Authentication Service
This event generates every time Key Distribution Center issues a Kerberos Ticket Granting Ticket (TGT).
Kerberos Service Ticket Operations
Account Management
Security Group Management
User Account Management
Detailed Tracking
Process Creation
Logon/Logoff
Logon
Logon, Account Lockout
Other Logon/Logoff Events
Policy Change
Authentication Policy Change
Authorization Policy Change
System
Other System Events
Audit Policy Requirements
| Category | Subcategory | Audit Type |
|---|---|---|
| Policy Change | Authentication Policy Change | Success |
| Policy Change | Authorization Policy Change | Success |
| Account Logon | Credential Validation | Success, Failure |
| Account Logon | Kerberos Authentication Service | Failure |
| Account Logon | Kerberos Service Ticket Operations | Success, Failure |
| Logon/Logoff | Logon | Success |
| Logon/Logoff | Logon, Account Lockout | Failure |
| Logon/Logoff | Other Logon/Logoff Events | Success |
| System | Other System Events | Success |
| Detailed Tracking | Process Creation | Success |
| Account Management | Security Group Management | Success |
| Account Management | User Account Management | Success |