Assessment Objective
Determine if:
- AU-04 audit log storage capacity is allocated to accommodate [Assignment: audit log retention requirements].
Assessment Methods
Examine
- Audit and accountability policy
- procedures addressing audit storage capacity
- system security plan
- privacy plan
- system design documentation
- system configuration settings and associated documentation
- audit record storage requirements
- audit record storage capability for system components
- system audit records
- other relevant documents or records
Interview
- Organizational personnel with audit and accountability responsibilities
- organizational personnel with information security and privacy responsibilities
- system/network administrators
- system developers
Test
- Audit record storage capacity and related configuration settings
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | AU-04 [L] Audit Log Storage Capacity |