+AU-06(04) Central Review and Analysis
|
AU-06(04) Central Review and Analysis
Control
Provide and implement the capability to centrally review and analyze audit records from multiple components within the system.
Discussion
Automated mechanisms for centralized reviews and analyses include Security Information and Event Management products.
Assessment Objective
- the capability to centrally review and analyze audit records from multiple components within the system is provided;
- the capability to centrally review and analyze audit records from multiple components within the system is implemented.
Assessment Method
Examine
Audit and accountability policy
procedures addressing audit review, analysis, and reporting
system design documentation
system configuration settings and associated documentation
system security plan
privacy plan
system audit records
other relevant documents or records
Interview
Organizational personnel with audit review, analysis, and reporting responsibilities
organizational personnel with information security and privacy responsibilities
system developers
1. Ħarsa ġenerali
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Regolamenti relatati
2. Rekwiżiti identifikati
3. Regolamenti relatati
Regolamenti
| Sors |
Regolamentazzjoni |
Kwistjonijiet marbuta
|