Event Categories

• Security Organization

  • written site policy
  • derived and stated

• Why? Ease of rule generation

• Suggested Minimum

  • Administrative Limited Usage
  • Role Specific Daily/Routine
  • Policy Limits