Assessment Objective
Determine if:
- access to management of audit logging functionality is authorized to only a subset of privileged users or roles.
- audit information is protected from unauthorized access, modification, and deletion.
- audit logging tools are protected from unauthorized access, modification, and deletion.
Assessment Methods
Examine
- audit and accountability policy and procedures
- access control policy and procedures
- procedures for the protection of audit information
- system configuration settings
- system audit records
- audit tools
- system-generated list of privileged users with access to the management of audit functionality
- access authorizations
- access control list
- system design documentation
- system security plan
- other relevant documents or records
Interview
- personnel with audit and accountability responsibilities
- personnel with information security responsibilities
- system developers
- system administrators
Test
- mechanisms for implementing audit information protection
- mechanisms for managing access to audit functionality
Linkitetyt tehtävät
| Linkin tyyppi | Tehtävä |
|---|---|
| blocks | 03.03.08 Protection of Audit Information |