Assessment Objective
Determine if:
- internal system clocks are used to generate time stamps for audit records.
- time stamps are recorded for audit records that use Coordinated Universal Time (UTC), have a fixed local time offset from UTC, or include the local time offset as part of the time stamp.
- time stamps are recorded for audit records that meet [Assignment: granularity of time measurement].
Assessment Methods
Examine
- audit and accountability policy and procedures
- procedures for timestamp generation
- system design documentation
- system configuration settings
- system audit records
- system security plan
- other relevant documents or records
Interview
- personnel with information security responsibilities
- system developers
- system administrators
Test
- mechanisms for implementing timestamp generation
Susietos užduotys
| Saito tipas | Užduotis |
|---|---|
| blocks | 03.03.07 Time Stamps |