+CM-05(01) Automated Access Enforcement and Audit Records

CM-05(01) Automated Access Enforcement and Audit Records

Control

  1. Enforce access restrictions using [Assignement: automated mechanisms] ; and
  2. Automatically generate audit records of the enforcement actions.

Discussion

Organizations log system accesses associated with applying configuration changes to ensure that configuration change control is implemented and to support after-the-fact actions should organizations discover any unauthorized changes.

Assessment Objective

  1. access restrictions for change are enforced using [Assignement: automated mechanisms];
  2. audit records of enforcement actions are automatically generated.

Assessment Method

Examine

Configuration management policy procedures addressing access restrictions for changes to the system system design documentation system architecture and configuration documentation system configuration settings and associated documentation change control records system audit records system security plan other relevant documents or records

Interview

Organizational personnel with logical access control responsibilities organizational personnel with physical access control responsibilities organizational personnel with information security responsibilities system/network administrators

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
is blocked by CM-05(01) Automated Access Enforcement and Audit Records – Assessment Procedure
is blocked by Access Restriction For Change
is blocked by Post Configuration Change Reviews