Assessment Objective
Determine if:
- AU-14a.
- AU-14a.[01] [Assignment: users or roles] are provided with the capability to [Selection (one or more): record; view; hear; log] the content of a user session under [Assignment: circumstances];
- AU-14a.[02] the capability for [Assignment: users or roles] to [Selection (one or more): record; view; hear; log] the content of a user session under [Assignment: circumstances] is implemented;
- AU-14b.
- AU-14b.[01] session auditing activities are developed in consultation with legal counsel and in accordance with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines;
- AU-14b.[02] session auditing activities are integrated in consultation with legal counsel and in accordance with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines;
- AU-14b.[03] session auditing activities are used in consultation with legal counsel and in accordance with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines;
Assessment Methods
Examine
- Audit and accountability policy
- system security plan
- privacy plan
- procedures addressing user session auditing
- system design documentation
- system configuration settings and associated documentation
- system audit records
- other relevant documents or records
Interview
- Organizational personnel with information security and privacy responsibilities
- system/network administrators
- system developers
- legal counsel
- personnel with civil liberties responsibilities
Test
- Mechanisms implementing user session auditing capability
Linked Issues
| Linktype | Issue |
|---|---|
| blocks | AU-14 Session Audit |