+AU-12(04) Query Parameter Audits of Personally Identifiable Information

AU-12(04) Query Parameter Audits of Personally Identifiable Information

Control

Provide and implement the capability for auditing the parameters of user query events for data sets containing personally identifiable information.

Discussion

Query parameters are explicit criteria that an individual or automated system submits to a system to retrieve data. Auditing of query parameters for datasets that contain personally identifiable information augments the capability of an organization to track and understand the access, usage, or sharing of personally identifiable information by authorized personnel.

Assessment Objective

  1. the capability to audit the parameters of user query events for data sets containing personally identifiable information is provided;
  2. the capability to audit the parameters of user query events for data sets containing personally identifiable information is implemented.

Assessment Method

Examine

Audit and accountability policy system security plan privacy plan procedures addressing audit record generation query event records system design documentation system configuration settings and associated documentation map of system data actions system audit records other relevant documents or records

Interview

Organizational personnel with audit record generation responsibilities organizational personnel with information security and privacy responsibilities system/network administrators system developers

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
is blocked by AU-12(04) Query Parameter Audits of Personally Identifiable Information – Assessment Procedure
is blocked by Query Parameter Audits of Personal Data (PD)