Assessment Objective
Determine if:
- AU-07a.
- AU-07a.[01] an audit record reduction and report generation capability is provided that supports on-demand audit record review, analysis, and reporting requirements and after-the-fact investigations of incidents;
- AU-07a.[02] an audit record reduction and report generation capability is implemented that supports on-demand audit record review, analysis, and reporting requirements and after-the-fact investigations of incidents;
- AU-07b.
- AU-07b.[01] an audit record reduction and report generation capability is provided that does not alter the original content or time ordering of audit records;
- AU-07b.[02] an audit record reduction and report generation capability is implemented that does not alter the original content or time ordering of audit records.
Assessment Methods
Examine
- Audit and accountability policy
- system security plan
- privacy plan
- procedures addressing audit reduction and report generation
- system design documentation
- system configuration settings and associated documentation
- audit reduction, review, analysis, and reporting tools
- system audit records
- other relevant documents or records
Interview
- Organizational personnel with audit reduction and report generation responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Audit reduction and report generation capability
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | AU-07 [H] Audit Record Reduction and Report Generation |