+AU-05(05) Alternate Audit Logging Capability

AU-05(05) Alternate Audit Logging Capability

Control

Provide an alternate audit logging capability in the event of a failure in primary audit logging capability that implements [Assignement: alternate audit logging functionality].

Discussion

Since an alternate audit logging capability may be a short-term protection solution employed until the failure in the primary audit logging capability is corrected, organizations may determine that the alternate audit logging capability need only provide a subset of the primary audit logging functionality that is impacted by the failure.

Assessment Objective

an alternate audit logging capability is provided in the event of a failure in primary audit logging capability that implements [Assignement: alternate audit logging functionality].

Assessment Method

Examine

Audit and accountability policy procedures addressing response to audit processing failures system design documentation system security plan privacy plan system configuration settings and associated documentation system audit records other relevant documents or records

Interview

Organizational personnel with audit and accountability responsibilities organizational personnel with information security and privacy responsibilities system/network administrators system developers

1. Ħarsa ġenerali

Titlu Standard

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti
Sors Rekwiżit

3. Regolamenti relatati

Regolamenti
Sors Regolamentazzjoni

Kwistjonijiet marbuta