Assessment Objective
Determine if:
- AC-02(04)[01] account creation is automatically audited;
- AC-02(04)[02] account modification is automatically audited;
- AC-02(04)[03] account enabling is automatically audited;
- AC-02(04)[04] account disabling is automatically audited;
- AC-02(04)[05] account removal actions are automatically audited.
Assessment Methods
Examine
- Access control policy
- procedures addressing account management
- system design documentation
- system configuration settings and associated documentation
- notifications/alerts of account creation, modification, enabling, disabling, and removal actions
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with account management responsibilities
- system/network administrators
- organizational personnel with information security responsibilities
Test
- Automated mechanisms implementing account management functions
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | AC-02(04) Automated Audit Actions |