Assessment Objective
Determine if:
- AU-06(03) audit records across different repositories are analyzed and correlated to gain organization-wide situational awareness.
Assessment Methods
Examine
- Audit and accountability policy
- system security plan
- privacy plan
- procedures addressing audit review, analysis, and reporting
- system design documentation
- system configuration settings and associated documentation
- system audit records across different repositories
- other relevant documents or records
Interview
- Organizational personnel with audit review, analysis, and reporting responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Mechanisms supporting the analysis and correlation of audit records
Gekoppelde issues
| Koppelingstype | Issue |
|---|---|
| blocks | AU-06(03) Correlate Audit Record Repositories |