Assessment Objectives
In addition to relevant policies, standards and procedures, the assessor shall examine, interview, and/or test to determine if appropriately scoped evidence exists to support the claim that:
- MON-06_A01 system components that provide an audit record generation capability for the events types are defined.
Defined parameters: all information system and network components where audit capability is deployed/available
Assessment rigor: 1
Origin: 53A_R5_AU-12_ODP[01] - MON-06_A02 audit records include organization-defined audit record content requirements.
Assessment rigor: 1
Origin: 53A_R5_AU-12c. - MON-06_A03 personnel or roles allowed to select the event types that are to be logged by specific components of the system is/are defined.
Assessment rigor: 1
Origin: 53A_R5_AU-12_ODP[02] - MON-06_A04 an audit record reduction and report generation capability is implemented that supports on-demand audit record review, analysis and reporting requirements and after-the-fact investigations of incidents that does not alter the original content or time ordering of audit records.
Assessment rigor: 1
Origin: 171A_3.3.6[b] 53A_R5_AU-07a.[02] 53A_R5_AU-07b.[02] 53A_R5_AU-07(01)[01] 53A_R5_AU-07(01)[02] 53A_R5_AU-12a. 53A_R5_AU-12b. - MON-06_A05 fields within audit records that can be processed, sorted or searched are defined.
Assessment rigor: 3
Origin: 53A_R5_AU-07(01)_ODP - MON-06_A06 findings are reported to organizational personnel or roles.
Assessment rigor: 2
Origin: 171A_R3_A.03.03.05.b - MON-06_A07 an audit record reduction and report generation capability that supports audit record review is implemented.
Assessment rigor: 2
Origin: 171A_R3_A.03.03.06.a[01] 171A_3.3.6[a] 53A_R5_AU-07a.[01] 53A_R5_AU-07b.[01] - MON-06_A08 an audit record reduction and report generation capability that supports audit record analysis is implemented.
Assessment rigor: 2
Origin: 171A_R3_A.03.03.06.a[02] 171A_3.3.6[a] 53A_R5_AU-07a.[01] 53A_R5_AU-07b.[01] - MON-06_A09 an audit record reduction and report generation capability that supports audit record reporting requirements is implemented.
Assessment rigor: 2
Origin: 171A_R3_A.03.03.06.a[03] 171A_3.3.6[a] 53A_R5_AU-07a.[01] 53A_R5_AU-07b.[01] - MON-06_A10 an audit record reduction and report generation capability that supports after-the-fact investigations of incidents is implemented.
Assessment rigor: 2
Origin: 171A_R3_A.03.03.06.a[04]
Kwistjonijiet marbuta
| Tip ta’ link | Kwistjoni |
|---|---|
| blocks | Monitoring Reporting |
- Secure Controls Framework -
EN: GRCA includes the Secure Controls Framework® (SCF) content, © Secure Controls Framework Council, LLC, used under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. SCF control numbers, names, descriptions and mappings appear exactly as published by the SCF Council – https://securecontrolsframework.com. GRCA may group or reorder SCF content for display, which does not change SCF content; the mappings are shown as links to the frameworks they name. Learn more at https://securecontrolsframework.com.
DE: GRCA enthält Inhalte des Secure Controls Framework® (SCF), © Secure Controls Framework Council, LLC, genutzt unter der Creative Commons Attribution-NoDerivatives 4.0 International Public License. Nummern, Namen, Beschreibungen und Zuordnungen der SCF-Controls erscheinen genau so, wie der SCF Council sie veröffentlicht – https://securecontrolsframework.com. GRCA gruppiert oder sortiert SCF-Inhalte für die Anzeige, ohne sie zu verändern; die Zuordnungen erscheinen als Verknüpfungen zu den genannten Regelwerken. Mehr unter https://securecontrolsframework.com.