+AC-03(10) Audited Override of Access Control Mechanisms

AC-03(10) Audited Override of Access Control Mechanisms

Control

Employ an audited override of automated access control mechanisms under [Assignement: conditions] by [Assignement: roles].

Discussion

In certain situations, such as when there is a threat to human life or an event that threatens the organization’s ability to carry out critical missions or business functions, an override capability for access control mechanisms may be needed. Override conditions are defined by organizations and used only in those limited circumstances. Audit events are defined in [AU-2](#au-2) . Audit records are generated in [AU-12](#au-12).

Assessment Objective

an audited override of automated access control mechanisms is employed under [Assignement: conditions] by [Assignement: roles].

Assessment Method

Examine

Access control policy procedures addressing access enforcement system design documentation system configuration settings and associated documentation conditions for employing audited override of automated access control mechanisms system audit records system security plan other relevant documents or records

Interview

Organizational personnel with access enforcement responsibilities system/network administrators organizational personnel with information security responsibilities

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
is blocked by AC-03(10) Audited Override of Access Control Mechanisms – Assessment Procedure