+AU-12(01) System-wide and Time-correlated Audit Trail

AU-12(01) System-wide and Time-correlated Audit Trail

Control

Compile audit records from [Assignement: system components] into a system-wide (logical or physical) audit trail that is time-correlated to within [Assignement: level of tolerance].

Discussion

Audit trails are time-correlated if the time stamps in the individual audit records can be reliably related to the time stamps in other audit records to achieve a time ordering of the records within organizational tolerances.

Assessment Objective

audit records from [Assignement: system components] are compiled into a system-wide (logical or physical) audit trail that is time-correlated to within [Assignement: level of tolerance].

Assessment Method

Examine

Audit and accountability policy system security plan privacy plan procedures addressing audit record generation system design documentation system configuration settings and associated documentation system-wide audit trail (logical or physical) system audit records other relevant documents or records

Interview

Organizational personnel with audit record generation responsibilities organizational personnel with information security and privacy responsibilities system/network administrators system developers

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
is blocked by AU-12(01) System-wide and Time-correlated Audit Trail – Assessment Procedure
is blocked by System-Wide / Time-Correlated Audit Trail