+AU-05(02) [H] Real-time Alerts
|
AU-05(02) [H] Real-time Alerts
Control
Provide an alert within [Assignement: real-time period] to [Assignement: personnel, roles, and/or locations] when the following audit failure events occur: [Assignement: audit logging failure events requiring real-time alerts].
Discussion
Alerts provide organizations with urgent messages. Real-time alerts provide these messages at information technology speed (i.e., the time from event detection to alert occurs in seconds or less).
Assessment Objective
an alert is provided within [Assignement: real-time period] to [Assignement: personnel, roles, and/or locations] when [Assignement: audit logging failure events requiring real-time alerts] occur.
Assessment Method
Examine
Audit and accountability policy
procedures addressing response to audit processing failures
system design documentation
system security plan
privacy plan
system configuration settings and associated documentation
system audit records
other relevant documents or records
Interview
Organizational personnel with audit and accountability responsibilities
organizational personnel with information security and privacy responsibilities
system/network administrators
system developers
1. Ħarsa ġenerali
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Regolamenti relatati
2. Rekwiżiti identifikati
3. Regolamenti relatati
Regolamenti
| Sors |
Regolamentazzjoni |
Kwistjonijiet marbuta
|