Government Remote Service Security Audit

This dataset provides a detailed log of security events, compliance checks, and user access activities across remote government digital services. It enables administrators and auditors to monitor cybersecurity posture, investigate incidents, and ensure regulatory compliance in dynamic remote environments. The dataset supports proactive risk management and rapid response to non-compliance or security threats.

  • last updated 25 Dec 2025
  • by GoMask
The brief that made it

Continuous monitoring for security incidents and compliance violations

Sample rows

preview · 8 of 60 rows · all 19 columns
event_idstringevent_severitystringnon_compliance_flagbooleancompliance_resultstringevent_typestringevent_timestampdatetimeservice_idstringservice_namestringuser_idstringuser_rolestringuser_departmentstringevent_statusstringcompliance_check_typestringsource_ipstringlocation_citystringlocation_countrystringresolved_timestampdatetimedescriptionstringremediation_actionstring
EVT-00001hightrueblanksecurity_incident2024-04-01T08:13:22ZSRV-101Citizen PortalUSR-001adminIT Securityin_progressblank192.168.10.24WashingtonUSAblankUnauthorized data access from privileged account detected.Disable user credentials and initiate investigation.
EVT-00002mediumtruefailcompliance_check2024-04-01T09:47:10ZSRV-102Tax Filing ServiceUSR-002auditorAudit Officeresolvedpassword_policy10.0.2.14ChicagoUSA2024-04-01T12:02:30ZPassword policy violation found during audit.Update password policy and notify affected users.
EVT-00003lowfalseblankuser_access2024-04-01T10:21:05ZSRV-103Business GrantsUSR-003end_userSmall Business Agencyclosedblank172.16.5.32DallasUSA2024-04-01T10:22:15ZUser successfully logged in to submit grant application.blank
EVT-00004criticaltrueblanksecurity_incident2024-04-01T11:02:54ZSRV-104Permits OnlineUSR-004systemInfrastructureopenblank203.0.113.45New YorkUSAblankSystem detected brute-force attack on login endpoint.Block attacking IP and review logs.
EVT-00005mediumfalsepasscompliance_check2024-04-01T12:37:18ZSRV-105Driver License RenewalUSR-005auditorDMVin_progressMFA172.16.10.2MiamiUSAblankMulti-factor authentication audit completed successfully.blank
EVT-00006lowfalseblankuser_access2024-04-01T13:04:30ZSRV-101Citizen PortalUSR-006end_userPublic Servicesopenblank10.1.1.8PhoenixUSAblankUser accessed account for public services update.blank
EVT-00007hightrueblanksecurity_incident2024-04-01T14:26:12ZSRV-106Health RecordsUSR-007adminHealth ITresolvedblank198.51.100.250San FranciscoUSA2024-04-01T15:45:00ZPotential data leak detected in patient records.Patch data access module and alert privacy officer.
EVT-00008mediumtruewarningcompliance_check2024-04-01T15:11:39ZSRV-107Unemployment ClaimsUSR-008auditorLabor Departmentcloseddata_encryption172.16.20.5SeattleUSA2024-04-01T16:35:20ZEncryption protocol found to be outdated.Upgrade encryption standards to current NIST recommendations.

What the 60 rows show

from the 60-row sample

High (event severity) stands out: 10 of its 10 rows have non_compliance_flag = true, against 16 of 50 for the rest.

  • 43%non_compliance_flag = true
  • 3event types
  • 3compliance check types
  • 4user roles
  • 4event statuses
  • 16services
Non compliance flag rate by event_severitynon_compliance_flag = true
0%50%100%0%low0 of 2135%medium7 of 20100%high10 of 10100%critical9 of 9
compliance_result20 rows with a value · 40 left blank
  1. pass9
  2. fail5
  3. warning4
  4. not_applicable2
19 columns by typefrom the column list below
  • string 16
  • datetime 2
  • boolean 1

Columns

19 columns in three groups
blueprint · 19 columns
columntypedescriptionexample
Text 16 columns
event_idstringUnique identifier for each security event or audit recorduniqueEVT-00001
event_typestringType of event (e.g., security_incident, compliance_check, user_access)security_incident · compliance_check · user_accesssecurity_incident
service_idstringUnique identifier for the remote government digital service involvedSRV-101
service_namestringHuman-readable name of the government digital serviceCitizen Portal
user_idstringUnique identifier of the user involved in the event (if applicable)optionalUSR-001
user_rolestringRole of the user (e.g., admin, auditor, end_user, system)admin · auditor · end_user · system · optionaladmin
user_departmentstringDepartment or agency the user belongs tooptionalIT Security
event_severitystringSeverity level of the event (e.g., low, medium, high, critical)low · medium · high · critical · optionalhigh
event_statusstringCurrent status of the event (e.g., open, in_progress, resolved, closed)open · in_progress · resolved · closed · optionalin_progress
compliance_check_typestringType of compliance check performed (e.g., password_policy, MFA, data_encryption)3 types · optionalpassword_policy
compliance_resultstringResult of the compliance check (e.g., pass, fail, warning, not_applicable)pass · fail · warning · not_applicable · optionalfail
source_ipstringIP address from which the event originatedoptional192.168.10.24
location_citystringCity where the event originated (if available)optionalWashington
location_countrystringCountry where the event originated (if available)optionalUSA
descriptionstringDetailed description of the event or audit findingoptionalUnauthorized data access …
remediation_actionstringAction taken or recommended to remediate the event or compliance issueoptionalDisable user credentials …
Dates and times 2 columns
event_timestampdatetimeDate and time when the event occurred2024-04-01T08:13:22Z
resolved_timestampdatetimeDate and time when the event was resolved (if applicable)optional2024-04-01T12:02:30Z
True or false 1 column
non_compliance_flagbooleanIndicates if the event flagged a non-compliance issueoptionaltrue

Use it for

  • non compliance…43%26 of 60 rowsnon compliance flag b…0%low35%medi…100%high100%crit…

    A government dashboard

    The non_compliance_flag rate, non_compliance_flag by event_severity and a breakdown of compliance_result. Excel, Power BI or Tableau.

  • Why do 26 of 60 rows have non_compliance_flag = true?

    A root-cause class exercise

    Hand out the rows and one question. The answer is in the data, not in the brief.

  • A software demo

    Believable events with event_type, event_timestamp and service_id to fill a screen in front of a buyer.

Not quite right?

Make it yours.

Same 19 columns, your size and your rules. See 20 rows before you pay.

Preview 20 rows free

1,000 rows: $1.99 · 10,000: $12.99One-time. No subscription. All prices

This dataset60 rows19 columns
Yours1,000 rows19 columnslocation_city: UK only

blueprint · government-remote-service-security-audit

Behind this dataset

Same schema. As many rows as you need.

These 60 rows came out of a blueprint — 19 columns with generation rules behind each one. Open it in Data Factory to retune a column, add your own, wire in foreign keys, and run it at the size you actually need.

Rules it was built with
  • Each record must include a timestamp, user role, and service accessed.
  • Log all failed authentication attempts with associated risk level.
  • Flag sessions exceeding predefined duration thresholds for review.
  • Include compliance check results for required cybersecurity standards.
  • Only authorized roles can initiate service configuration changes.
Rows
Open the blueprint in Data Factory

1 credit per row. Preview 20 rows free. Buy rows for the full run.

Exports
CSV, JSON, JSONL, Parquet, SQL, Excel, TSV, XML
Licence
yours to use, including commercially
API slug
government-remote-service-security-audit

More in Government

Browse all
Also in GovernmentMunicipal IoT Security Audit LogPublic Procurement Transparency LogsGovernment AI Chatbot LogsAll 1,958 datasets

What should your data show?

Preview 20 rows free
No signup. No card.