Assessment Objective
Determine if:
- AU-06(06) information from audit records is correlated with information obtained from monitoring physical access to further enhance the ability to identify suspicious, inappropriate, unusual, or malevolent activity.
Assessment Methods
Examine
- Audit and accountability policy
- procedures addressing audit review, analysis, and reporting
- procedures addressing physical access monitoring
- system design documentation
- system configuration settings and associated documentation
- documentation providing evidence of correlated information obtained from audit records and physical access monitoring records
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with audit review, analysis, and reporting responsibilities
- organizational personnel with physical access monitoring responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Mechanisms implementing the capability to correlate information from audit records with information from monitoring physical access
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | AU-06(06) Correlation with Physical Monitoring |