+MA-04(01) Logging and Review

MA-04(01) Logging and Review

Control

  1. Log [Assignement: organization-defined audit events] for nonlocal maintenance and diagnostic sessions; and
  2. Review the audit records of the maintenance and diagnostic sessions to detect anomalous behavior.

Discussion

Audit logging for nonlocal maintenance is enforced by [AU-2](#au-2) . Audit events are defined in [AU-2a](#au-2_smt.a).

Assessment Objective

    1. [Assignement: audit events] are logged for nonlocal maintenance sessions;
    2. [Assignement: audit events] are logged for nonlocal diagnostic sessions;
    1. the audit records of the maintenance sessions are reviewed to detect anomalous behavior;
    2. the audit records of the diagnostic sessions are reviewed to detect anomalous behavior.

Assessment Method

Examine

Maintenance policy procedures addressing nonlocal system maintenance list of audit events system configuration settings and associated documentation maintenance records diagnostic records audit records reviews of maintenance and diagnostic session records system security plan other relevant documents or records

Interview

Organizational personnel with system maintenance responsibilities organizational personnel with information security responsibilities organizational personnel with audit and review responsibilities system/network administrators

1. Oversigt

1.1 Referencer

1.2 Identificerede krav

1.3 Relaterede reguleringer

2. Identificerede krav

Krav

3. Relaterede reguleringer

Reguleringer

Linkede sager

Sagslinks
is blocked by MA-04(01) Logging and Review – Assessment Procedure
is blocked by Auditing Remote Maintenance