+AU-16(02) Sharing of Audit Information
|
AU-16(02) Sharing of Audit Information
Control
Provide cross-organizational audit information to [Assignement: organizations] based on [Assignement: cross-organizational sharing agreements].
Discussion
Due to the distributed nature of the audit information, cross-organization sharing of audit information may be essential for effective analysis of the auditing being performed. For example, the audit records of one organization may not provide sufficient information to determine the appropriate or inappropriate use of organizational information resources by individuals in other organizations. In some instances, only individuals’ home organizations have the appropriate knowledge to make such determinations, thus requiring the sharing of audit information among organizations.
Assessment Objective
cross-organizational audit information is provided to [Assignement: organizations] based on [Assignement: cross-organizational sharing agreements].
Assessment Method
Examine
Audit and accountability policy
system security plan
privacy plan
procedures addressing cross-organizational sharing of audit information
information sharing agreements
other relevant documents or records
Interview
Organizational personnel with responsibilities for sharing cross-organizational audit information
organizational personnel with information security and privacy responsibilities
1. Přehled
1.1 Odkazy
1.2 Identifikované požadavky
1.3 Související regulace
2. Identifikované požadavky
Požadavky
| Zdroj |
Požadavek |
3. Související regulace
Propojené úkoly
|