The 2021 White House memorandum, which established baseline logging standards, needs an update to keep pace with modern cyber threats.
In August 2021, the White House released memorandum M-21-31, establishing baseline logging and data preservation requirements for federal agencies. This created a framework for capturing, retaining, and managing data, aiming to improve visibility and empower agencies to detect and respond to security incidents more effectively.
However, M-21-31's methods are increasingly outdated. To address modern cyber threats, it must evolve to mandate continuous logging. A revised memorandum should encourage the adoption of open standards collection and open data-storage protocols, ensuring the government retains ownership of the logs.
M-21-31 must evolve to mandate continuous logging.
A revised approach would improve the effectiveness of federal agencies in detecting and responding to security incidents.
Author's summary: Updating logging requirements is crucial for agencies to combat modern cyber threats.