Control 3.3.6

★What This Means in Plain English

You need the ability to filter, search, and create reports from your audit logs quickly. When an incident occurs, you should be able to pull relevant records within minutes, not days.

✓How Petronella Implements This Control

Petronella Technology Group implements this control through:

• Arctic Wolf SIEM providing on-demand search, filtering, and report generation across all log sources
• Pre-built dashboards for common security queries (failed logins, privilege changes, data transfers)
• Custom report templates for compliance audits and incident investigations
• Automated weekly and monthly security summary reports delivered to management
• ComplianceArmor generating compliance-specific audit reports on demand

🔎Assessment Guidance

Assessors will request sample audit reports demonstrating search and filter capabilities, verify that reports can be generated on demand, test the ability to query logs for specific events within a defined time range, and review standard report templates.

⚠Common Implementation Gaps

• No ability to search or filter logs efficiently
• Logs stored in flat files with no indexing or search capability
• Report generation requires manual effort and takes days
• No pre-built report templates for common security queries
• SIEM deployed but search capabilities not utilized

⇄Cross-Framework Mapping