What must the monitoring scope cover in addition to the deployed assets?
What must the monitoring scope cover in addition to the deployed assets?
In a cloud environment, the monitoring scope must cover the management plane in addition to the deployed assets. The management plane handles the control and configuration of the cloud resources, and monitoring it is crucial for maintaining the security and performance of the cloud environment. This includes activities like access management, resource provisioning, and configuration changes, which are essential to be tracked.
Security Guidance v4.0 >> p.104 9.1.2.2 Detection and Analysis Detection and analysis in a cloud environment may look nearly the same (for IaaS) and quite different (for SaaS). In all cases, the monitoring scope must cover the cloud’s management plane, not merely the deployed assets.