Assessment Objective
Determine if:
- AU-06(04)[01] the capability to centrally review and analyze audit records from multiple components within the system is provided;
- AU-06(04)[02] the capability to centrally review and analyze audit records from multiple components within the system is implemented.
Assessment Methods
Examine
- Audit and accountability policy
- procedures addressing audit review, analysis, and reporting
- system design documentation
- system configuration settings and associated documentation
- system security plan
- privacy plan
- system audit records
- other relevant documents or records
Interview
- Organizational personnel with audit review, analysis, and reporting responsibilities
- organizational personnel with information security and privacy responsibilities
- system developers
Test
- System capability to centralize review and analysis of audit records
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | AU-06(04) Central Review and Analysis |