+AU-03(01) Additional Audit Information
|
AU-03(01) Additional Audit Information
Control
Generate audit records containing the following additional information: [Assignement: additional information].
Discussion
The ability to add information generated in audit records is dependent on system functionality to configure the audit record content. Organizations may consider additional information in audit records including, but not limited to, access control or flow control rules invoked and individual identities of group account users. Organizations may also consider limiting additional audit record information to only information that is explicitly needed for audit requirements. This facilitates the use of audit trails and audit logs by not including information in audit records that could potentially be misleading, make it more difficult to locate information of interest, or increase the risk to individuals' privacy.
Assessment Objective
generated audit records contain the following [Assignement: additional information].
Assessment Method
Examine
Audit and accountability policy
procedures addressing content of audit records
system security plan
privacy plan
system design documentation
system configuration settings and associated documentation
list of organization-defined auditable events
system audit records
other relevant documents or records
Interview
Organizational personnel with audit and accountability responsibilities
organizational personnel with information security and privacy responsibilities
system/network administrators
system developers
1. Oversigt
1.1 Referencer
1.2 Identificerede krav
1.3 Relaterede reguleringer
2. Identificerede krav
3. Relaterede reguleringer
Reguleringer
| Kilde |
Regulering |
Linkede sager
|