Systems Monitoring and Auditing Policy

System monitoring and auditing is used to determine if inappropriate actions, either intentional or unintentional, have occurred within an information system. System monitoring is used to look for these inappropriate actions in real time while system auditing looks for them after the fact. Without system monitoring and auditing it can be difficult, if not impossible, to determine when a failure of the information system security, or a breach of the information systems itself has occurred, the magnitude of the breach or failure, and the details of that breach or failure.