How can you prevent Insufficient Logging and Monitoring?

Select the $5$ correct answers.

a$.$ Ensure all login$,$ access control failures, and server$-$side input validation failures can be logged with sufficient user context to identify suspicious or malicious accounts, and held for sufficient time to allow delayed forensic analysis

b$.$ Ensure that logs are generated in a format that can be easily consumed by a centralized log management solutions

C$.$ Ensure that logs are generated in a format that cannot be easily consumed by a centralized log management solutions

d$.$ Ensure high$-$value transactions have an audit trail with integrity controls to prevent tampering or deletion, such as append$-$only database tables

E$.$ Establish effective monitoring and alerting such that suspicious activities are detected and responded to in a timely fashion

f$.$ Etablich or adopt an incident response and recovery plan, such as NIST $800-61$rev $2$ or later