Assessment Objective
Determine if:
- AC-06(09) the execution of privileged functions is logged.
Assessment Methods
Examine
- Access control policy
- procedures addressing least privilege
- system design documentation
- system configuration settings and associated documentation
- list of privileged functions to be audited
- list of audited events
- system audit records
- system security plan
- other relevant documents or records
Interview
- Organizational personnel with responsibilities for reviewing least privileges necessary to accomplish specified tasks
- organizational personnel with information security responsibilities
- system/network administrators
- system developers
Test
- Mechanisms auditing the execution of least privilege functions
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | AC-06(09) [M] Log Use of Privileged Functions |