+AC-02(04) Automated Audit Actions
|
AC-02(04) Automated Audit Actions
Control
Automatically audit account creation, modification, enabling, disabling, and removal actions.
Discussion
Account management audit records are defined in accordance with [AU-02](#au-2) and reviewed, analyzed, and reported in accordance with [AU-06](#au-6).
Assessment Objective
- account creation is automatically audited;
- account modification is automatically audited;
- account enabling is automatically audited;
- account disabling is automatically audited;
- account removal actions are automatically audited.
Assessment Method
Examine
Access control policy
procedures addressing account management
system design documentation
system configuration settings and associated documentation
notifications/alerts of account creation, modification, enabling, disabling, and removal actions
system audit records
system security plan
other relevant documents or records
Interview
Organizational personnel with account management responsibilities
system/network administrators
organizational personnel with information security responsibilities
1. Apžvalga
1.1 Nuorodos
1.2 Nustatyti reikalavimai
1.3 Susiję teisės aktai
2. Nustatyti reikalavimai
Reikalavimai
| Šaltinis |
Reikalavimas |
3. Susiję teisės aktai
Teisės aktai
| Šaltinis |
Reguliavimas |
Susietos užduotys
|