Assessment Objective
Determine if:
- the following event types are specified for logging within the system: [Assignment: event types].
- the event types selected for logging are reviewed [Assignment: frequency].
- the event types selected for logging are updated [Assignment: frequency].
Assessment Methods
Examine
- audit and accountability policy and procedures
- procedures for auditable events
- system design documentation
- system configuration settings
- system audit records
- system auditable events
- system security plan
- other relevant documents or records
Interview
- personnel with audit and accountability responsibilities
- personnel with information security responsibilities
- system administrators
Test
- mechanisms for implementing system auditing
Lingitud teemad
| Lingi tüüp | Teema |
|---|---|
| blocks | 03.03.01 Event Logging |