Why it matters
Logs from systems with drifted clocks are far harder to correlate during an actual investigation.
How a self-led small team implements it
NTP is on by default on most modern cloud infrastructure — confirm it and document that.
What auditors expect to see
NTP configuration confirmation.
Track A.8.17 in your own Statement of Applicability — mark it applicable, log your justification, and link it to the risk that drove it.
Start your ISMS