Assessment Objective
Determine if:
- AU-16(03) [Assignment: measures] are implemented to disassociate individuals from audit information transmitted across organizational boundaries.
Assessment Methods
Examine
- Audit and accountability policy
- system security plan
- privacy plan
- procedures addressing cross-organizational sharing of audit information
- policy and/or procedures regarding the deidentification of PII
- system design documentation
- system configuration settings and associated documentation
- system audit records
- other relevant documents or records
Interview
- Organizational personnel with responsibilities for sharing cross-organizational audit information
- organizational personnel with information security and privacy responsibilities
Test
- Mechanisms implementing disassociability
Linkede sager
| Linktype | Sag |
|---|---|
| blocks | AU-16(03) Disassociability |