Assessment Objective

Determine if:

• AU-08a. internal system clocks are used to generate timestamps for audit records;
• AU-08b. timestamps are recorded for audit records that meet [Assignment: granularity of time measurement] and that use Coordinated Universal Time, have a fixed local time offset from Coordinated Universal Time, or include the local time offset as part of the timestamp.

Assessment Methods

Examine

• Audit and accountability policy
• system security plan
• privacy plan
• procedures addressing timestamp generation
• system design documentation
• system configuration settings and associated documentation
• system audit records
• other relevant documents or records

Interview

• Organizational personnel with information security and privacy responsibilities
• system/network administrators
• system developers

Test

• Mechanisms implementing timestamp generation

Kapcsolt feladatok

• NIST -

  https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final