+AU-09(07) Store on Component with Different Operating System

AU-09(07) Store on Component with Different Operating System

Control

Store audit information on a component running a different operating system than the system or component being audited.

Discussion

Storing auditing information on a system component running a different operating system reduces the risk of a vulnerability specific to the system, resulting in a compromise of the audit records.

Assessment Objective

audit information is stored on a component running a different operating system than the system or component being audited.

Assessment Method

Examine

Audit and accountability policy system security plan privacy plan access control policy and procedures procedures addressing protection of audit information system design documentation system configuration settings and associated documentation system audit records other relevant documents or records

Interview

Organizational personnel with audit and accountability responsibilities organizational personnel with information security and privacy responsibilities system/network administrators

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by AU-09(07) Store on Component with Different Operating System – Assessment Procedure