Control: 3.2 Ensure that archiving is enabled for audit events
Description
Archive events for long-term storage so that you have access to data for a longer period of time, you can comply with highly regulated environments, you can recover quickly in the eventuality of a disaster scenario, and you can adhere to internal data storage policies.
Remediation
IBM Cloud Activity Tracker with LogDNA does not backup your data. You are responsible for archiving your events. When you enable archiving of your data, you are responsible for checking that your archived files are not corrupted, and the maintenance of your archived files.
Usage
Run the control in your terminal:
powerpipe control run ibm_compliance.control.cis_v100_3_2Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run ibm_compliance.control.cis_v100_3_2 --shareSQL
This control uses a named query:
manual_control