Technical tools aggregate logs from all systems into a centralised platform for analysis and retention
Aggregating logs from servers, endpoints, network devices and cloud services into one searchable platform with retention covers the production and storage half of A.8.15, alongside the tamper-protection A.8.15 also requires.
Aggregating logs from across the environment into one searchable platform is the data foundation A.8.16's monitoring and detection activity is built on.