+AC-02(04) Automated Audit Actions

AC-02(04) Automated Audit Actions

Control

Automatically audit account creation, modification, enabling, disabling, and removal actions.

Discussion

Account management audit records are defined in accordance with [AU-02](#au-2) and reviewed, analyzed, and reported in accordance with [AU-06](#au-6).

Assessment Objective

  1. account creation is automatically audited;
  2. account modification is automatically audited;
  3. account enabling is automatically audited;
  4. account disabling is automatically audited;
  5. account removal actions are automatically audited.

Assessment Method

Examine

Access control policy procedures addressing account management system design documentation system configuration settings and associated documentation notifications/alerts of account creation, modification, enabling, disabling, and removal actions system audit records system security plan other relevant documents or records

Interview

Organizational personnel with account management responsibilities system/network administrators organizational personnel with information security responsibilities

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by AC-02(04) Automated Audit Actions – Assessment Procedure
is blocked by Automated Audit Actions