Assessment Objective
Determine if:
- audit records for the selected event types and audit record content specified in 03.03.01 and 03.03.02 are generated.
- audit records are retained for a time period consistent with the records retention policy.
Assessment Methods
Examine
- audit and accountability policy and procedures
- procedures for audit record generation
- system design documentation
- list of auditable events
- system audit records
- audit record retention policy and procedures
- organization-defined retention period for audit records
- audit record archives
- system configuration settings
- system security plan
- other relevant documents or records
Interview
- personnel with audit record generation responsibilities
- personnel with audit record retention responsibilities
- personnel with information security responsibilities
- system developers
- system administrators
Test
- mechanisms for implementing the audit record generation capability
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | 03.03.03 Audit Record Generation |