Assessment Objective
Determine if:
- organizational personnel or roles are alerted in the event of an audit logging process failure within [Assignment: time period].
- the following additional actions are taken: [Assignment: additional actions].
Assessment Methods
Examine
- audit and accountability policy and procedures
- procedures for responding to audit processing failures
- system design documentation
- system configuration settings
- list of personnel to be notified in case of an audit processing failure
- system audit records
- system security plan
- other relevant documents or records
Interview
- personnel with audit and accountability responsibilities
- personnel with information security responsibilities
- system developers
- system administrators
Test
- mechanisms for implementing system response to audit processing failures
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | 03.03.04 Response to Audit Logging Process Failures |