Database Audit Logging Configuration Checklist Form
Use this form to document and verify your database audit logging setup. All questions pertain to the "Database Audit Logging Configuration Checklist".
Database systems in scope for audit logging (select all that apply)
*
Oracle
Microsoft SQL Server
PostgreSQL
MySQL/MariaDB
MongoDB
Other
Audit events currently being logged (select all that apply)
*
Logins/Logouts
Data modifications (INSERT/UPDATE/DELETE)
Schema changes
Privilege/role changes
Access to sensitive data
Other
How are audit logs stored and protected? (select all that apply)
*
Centralized log server
Encrypted storage
Write-once/read-many (WORM) media
Access restricted by role
Other
Audit log retention period
*
Please Select
30 days
90 days
180 days
1 year
Other
Are automated alerts configured for suspicious audit events?
*
Yes
No
Planned
Who is responsible for reviewing audit logs?
*
How often are audit logs reviewed?
*
Please Select
Daily
Weekly
Monthly
Quarterly
Other
Who has access to audit logs? (select all that apply)
*
Database administrators
Security team
IT management
Other
Are access controls enforced for audit log access?
*
Yes
No
Planned
Final confirmation: All items in the "Database Audit Logging Configuration Checklist" have been reviewed and completed.
*
I confirm all items have been reviewed and completed
Submit Checklist
Should be Empty: