iso27001

I've come to the point where I need to begin looking at logging for ISO 27001 compliance. Budgets are tight (aren't they always!) but I'm thinking the easiest way is to use some form of syslog server in our Windows domain based environment and regularly review the most frequent or critical...