Review access logs and anomalies
Security officer, CISO and vetting officer: Review access logs and anomalies. Starts when: Daily. Steps: Open access log grid; Filter anomalies; Investigate; Record outcome. Done when: The review shows each anomaly with an outcome and receipt. Rules that apply: NCSC Cyber Assessment Framework.