Assessment Objective
Determine if:
- analysis of audit records is integrated with analysis of [Assignment: SELECTED PARAMETER VALUE(S)] to further enhance the ability to identify inappropriate or unusual activity.
Assessment Methods
Examine
- Audit and accountability policy
- system security plan
- procedures addressing audit review, analysis, and reporting
- system design documentation
- system configuration settings and associated documentation
- integrated analysis of audit records, vulnerability scanning information, performance data, network monitoring information and associated documentation
- other relevant documents or records
Interview
- Personnel with audit review, analysis, and reporting responsibilities
- personnel with information security responsibilities
Test
- Mechanisms implementing the capability to integrate analysis of audit records with analysis of data or information sources
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | 03.03.04E Integrated Analysis of Audit Records |