Alert #8: File integrity Evidence log files were deleted or tampered with

Question: Should this issue be escalated?

Answer:

If you answered Yes:

1.Briefly describe the potential impact of the issue, including its potential impact to C.I.A.

2. Describe any recommended immediate action to address the event.

3.Provide your recommendation for a security control to mitigate risk moving forward.

If you answered No:

1.Provide your reason for dismissing the alert.