What security controls should protect OIMS logs?

What security controls should protect OIMS logs?

• A. Encrypted storage
• B. Tamper-evident logs
• C. Centralized SIEM
• D. All of the above

Answer: (D)

Protecting logs involves ensuring confidentiality, integrity, and auditable monitoring. Encrypted storage keeps log data unreadable if someone gains access to the storage, protecting confidentiality at rest. Tamper-evident logs make any modification detectable, preserving integrity and enabling accountability. A centralized SIEM collects logs from across systems, analyzes events, correlates activity, and provides real-time alerts and forensic capabilities. For OIMS, which handles sensitive offender information, using all three forms of protection creates defense in depth: data at rest is protected, tampering is detectable, and continuous monitoring and incident response are available. Relying on any single mechanism leaves gaps—encryption alone won’t reveal tampering, tamper-evidence alone won’t provide ongoing visibility, and a SIEM alone won’t guarantee data confidentiality or immutable storage. Thus, all of the above is the best approach.

Protecting logs involves ensuring confidentiality, integrity, and auditable monitoring. Encrypted storage keeps log data unreadable if someone gains access to the storage, protecting confidentiality at rest. Tamper-evident logs make any modification detectable, preserving integrity and enabling accountability. A centralized SIEM collects logs from across systems, analyzes events, correlates activity, and provides real-time alerts and forensic capabilities. For OIMS, which handles sensitive offender information, using all three forms of protection creates defense in depth: data at rest is protected, tampering is detectable, and continuous monitoring and incident response are available. Relying on any single mechanism leaves gaps—encryption alone won’t reveal tampering, tamper-evidence alone won’t provide ongoing visibility, and a SIEM alone won’t guarantee data confidentiality or immutable storage. Thus, all of the above is the best approach.