+AU-09(03) Cryptographic Protection

AU-09(03) Cryptographic Protection

Control

Implement cryptographic mechanisms to protect the integrity of audit information and audit tools.

Discussion

Cryptographic mechanisms used for protecting the integrity of audit information include signed hash functions using asymmetric cryptography. This enables the distribution of the public key to verify the hash information while maintaining the confidentiality of the secret key used to generate the hash.

Assessment Objective

cryptographic mechanisms to protect the integrity of audit information and audit tools are implemented.

Assessment Method

Examine

Audit and accountability policy system security plan privacy plan access control policy and procedures procedures addressing protection of audit information system design documentation system hardware settings system configuration settings and associated documentation system audit records other relevant documents or records

Interview

Organizational personnel with audit and accountability responsibilities organizational personnel with information security and privacy responsibilities system/network administrators system developers

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti

3. Regolamentazioni correlate

Regolamentazioni

Ticket collegati

Collegamenti
is blocked by AU-09(03) Cryptographic Protection – Assessment Procedure
is blocked by Cryptographic Protection of Event Logs & Security-Relevant Telemetry