2024 Audit - SEC-01-016 WP3: Insufficient Logging and Monitoring

[zenmonkeykstop]

Servers lack standard logging and monitoring practices, making data breach detection
difficult. Despite prioritizing privacy, the lack of local security logging rules and
centralized logging makes the environment vulnerable to undetected attacks. While
various security measures and OSSEC are in place, attacks from privileged user
compromises or targeting OSSEC agents may go unnoticed, potentially rendering
incident response procedures (e.g. rotate SVS private key) unused.

We will be investigating this further.