Regulation 6 Monitoring and analysisI1
United Kingdom
A network provider must take such measures as are appropriate and proportionate to monitor and analyse access to security critical functions of the public electronic communications network for the purpose of identifying anomalous activity that may involve a risk of a security compromise occurring.
A network provider or service provider must take such measures as are appropriate and proportionate—
to monitor and analyse the operation of security critical functions of the public electronic communications network or public electronic communications service for the purpose of identifying the occurrence of any security compromise, using automated means of monitoring and analysis where possible, and
to investigate any anomalous activity in relation to the network or service.
The duty in paragraph (2) includes in particular a duty—
to maintain a record of all access to security critical functions of the network or service, including the persons obtaining access,
to identify and record all cases where a person’s access to security critical functions of the network or service exceeds the person’s security permission,
to have in place means and procedures for producing immediate alerts of all manual amendments to security critical functions,
to analyse promptly all activity relating to security critical functions of the network or service for the purpose of identifying any anomalous activity,
to ensure that all data required for the purposes of a duty under paragraph (1) or sub-paragraphs (a) to (c) is held securely for at least 13 months, and
to take measures to prevent activities that would restrict the monitoring and analysis required by this regulation.
A network provider or service provider must record the type, location, software and hardware information and identifying information of equipment supplied by the network provider or service provider which is used or intended to be used as part of the public electronic communications network or public electronic communications service.