Annex 3.2.5

Full text: this article's wording is third-party regulatory text. See the official source for the authoritative provision.

Mapped SPARTA techniques (2)

DE-0003.08 Received CommandsST0006
addresses
high
direct
The implementing regulation requires logs to be maintained, backed up for a predefined period, and protected from unauthorized access and modification — exactly the integrity protection that resists tampering with command-history records.
DE-0010 Overflow Audit LogST0006
addresses
high
direct
The implementing regulation requires logs to be maintained for a predefined period and protected from unauthorised access; deliberately overflowing finite log buffers to overwrite incriminating events directly contradicts that obligation, and the protective measures it requires bound the success of log overflow.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.