Overview

Scrut integrates with Sumo Logic to capture log management configuration, alerts, and user access. Use it to demonstrate centralized logging/monitoring, validate who can change alert rules, and maintain audit evidence for security monitoring.

Why Connect

• Prove centralized logging and alerting is configured.
• Track who can change alerts and log settings.
• Support evidence for security monitoring controls.

Supported Automated Tests

Scrut provides pre-built automated tests for Sumo Logic. Here are a few examples of Scrut’s Sumo Logic tests:

• Access reviews completed for all in-scope applications
• Sumo Logic accounts associated with users
• Sumo Logic accounts deprovisioned when employees leave

Supported Automated Evidence

Scrut automates the collection of some evidences for Sumo Logic. Here are a few examples of Scrut’s Sumo Logic-driven evidences that can be collected:

• Offboarding - Logical Access & Physical Access Revocation
• Reports of User Access Reviews
• User Access Approval list to Application, Infrastructure and Service