Assessment Objective
Determine if:
- AU-09(07) audit information is stored on a component running a different operating system than the system or component being audited.
Assessment Methods
Examine
- Audit and accountability policy
- system security plan
- privacy plan
- access control policy and procedures
- procedures addressing protection of audit information
- system design documentation
- system configuration settings and associated documentation
- system audit records
- other relevant documents or records
Interview
- Organizational personnel with audit and accountability responsibilities
- organizational personnel with information security and privacy responsibilities
- system/network administrators
Test
- Mechanisms implementing operating system verification capability
- mechanisms verifying audit information storage location
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | AU-09(07) Store on Component with Different Operating System |