Assessment Objective
Determine if:
- AU-16(02) cross-organizational audit information is provided to [Assignment: organizations] based on [Assignment: cross-organizational sharing agreements].
Assessment Methods
Examine
- Audit and accountability policy
- system security plan
- privacy plan
- procedures addressing cross-organizational sharing of audit information
- information sharing agreements
- other relevant documents or records
Interview
- Organizational personnel with responsibilities for sharing cross-organizational audit information
- organizational personnel with information security and privacy responsibilities
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| blocks | AU-16(02) Sharing of Audit Information |