Which SP 800 document is the Guide to Computer Security log Management?

• A. Guideline for Media Santitization
• B. Guide to Computer Security log Management
• C. Guide to Intrusion Detection and Prevention Systems (IDPS)
• D. Information Security Continuous Monitoring for Federal Information System and Org

Answer: (B)

Logs are the heartbeat of security oversight, providing the data needed for monitoring, incident response, and forensics. The document titled Guide to Computer Security Log Management is the one that directly covers how to collect, centralize, analyze, store, and protect log data across systems, outlining what to log, how long to keep it, how to protect its integrity, and how to use it in practice. This makes it the exact reference for log management within the NIST SP 800 series. The other documents focus on different topics: sanitizing media to prevent data remnants, guidance on intrusion detection and prevention systems, and continuous monitoring of federal information systems and organizations. So the Guide to Computer Security Log Management is the correct match.