Assessment Objective
Determine if:
- AU-11(01) [Assignment: measures] are employed to ensure that long-term audit records generated by the system can be retrieved.
Assessment Methods
Examine
- Audit and accountability policy
- system security plan
- privacy plan
- audit record retention policy and procedures
- system design documentation
- system configuration settings and associated documentation
- audit record archives
- audit logs
- audit records
- other relevant documents or records
Interview
- Organizational personnel with audit record retention responsibilities
- organizational personnel with information security and privacy responsibilities
- system/network administrators
Test
- Mechanisms implementing audit record retention capability
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| blocks | AU-11(01) Long-term Retrieval Capability |