+AU-05(03) Configurable Traffic Volume Thresholds
|
AU-05(03) Configurable Traffic Volume Thresholds
Control
Enforce configurable network communications traffic volume thresholds reflecting limits on audit log storage capacity and [Selection(one-or-more): reject; delay] network traffic above those thresholds.
Discussion
Organizations have the capability to reject or delay the processing of network communications traffic if audit logging information about such traffic is determined to exceed the storage capacity of the system audit logging function. The rejection or delay response is triggered by the established organizational traffic volume thresholds that can be adjusted based on changes to audit log storage capacity.
Assessment Objective
- configurable network communications traffic volume thresholds reflecting limits on audit log storage capacity are enforced;
- network traffic is [Selection(one-or-more): reject; delay] if network traffic volume is above configured thresholds.
Assessment Method
Examine
Audit and accountability policy
procedures addressing response to audit processing failures
system design documentation
system security plan
privacy plan
system configuration settings and associated documentation
system audit records
other relevant documents or records
Interview
Organizational personnel with audit and accountability responsibilities
organizational personnel with information security and privacy responsibilities
system/network administrators
system developers
1. Ħarsa ġenerali
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Regolamenti relatati
2. Rekwiżiti identifikati
3. Regolamenti relatati
Regolamenti
| Sors |
Regolamentazzjoni |
Kwistjonijiet marbuta
|