Logging, Monitoring and Alerting

Logging

FundApps logs system and network events in order to detect and respond to information security threats.

The following events are logged:

• Application events:

  • Login attempts,

  • Changes to users and privileges,

• System events:

  • System accesses,

  • File system accesses,

  • Host-based IPS (Intrusion Prevention System) alerts.

• Network events:

  • Network traffic.

All events are aggregated, stored centrally and protected against alteration.

Monitoring and Alerting

FundApps has processes in place to monitor logs. Automated alerting of certain events or event thresholds allows FundApps staff to detect and respond to a potential security incident 24/7.

Security alerts are reviewed by the Security team and tracked in the Security Incident and Event Management tool, and a summary is provided during the monthly security meeting.