SB8: Administrative functions on servers and applications must be logged, whether the system is managed directly by Harvard or via contract with a third-party service provider for Harvard's use (e.g. IaaS, SaaS). See also: Level 3, Level 4, 4, Servers B, Level 3, Level 4
Include appropriate values in logs Administrative audit logs should contain a timestamp, username, source IP address... Read more about Include appropriate values in logs
