Draft CIS Benchmark 1.1.7
Description
Logs should be regularly (immediately) copied to an alternative data source, e.g. Syslog Server.
Rationale
Many exploits and exploit frameworks available today have the ability to potentially disrupt logging functionality as soon as a foothold is gained
Remediation
None provided
Audit
None provided