GRCA Planeth
Nie jesteś zalogowany
Zaloguj się
Start
Źródła
›
AU-09 Protection of Audit Information
›
Standard - AU-09(07) Store on Component with Different Operating System
+AU-09(07) Store on Component with Different Operating System
AU-09(07) Store on Component with Different Operating System
Control
Store audit information on a component running a different operating system than the system or component being audited.
Discussion
Storing auditing information on a system component running a different operating system reduces the risk of a vulnerability specific to the system, resulting in a compromise of the audit records.
Assessment Objective
audit information is stored on a component running a different operating system than the system or component being audited.
Assessment Method
Examine
Audit and accountability policy system security plan privacy plan access control policy and procedures procedures addressing protection of audit information system design documentation system configuration settings and associated documentation system audit records other relevant documents or records
Interview
Organizational personnel with audit and accountability responsibilities organizational personnel with information security and privacy responsibilities system/network administrators
1. Przegląd
Tytuł
Norma
1.1 Odwołania
1.2 Zidentyfikowane wymagania
1.3 Powiązane regulacje
2. Zidentyfikowane wymagania
Wymagania
Źródło
Wymaganie
3. Powiązane regulacje
Regulacje
Źródło
Regulacja
Powiązane zgłoszenia
Powiązania
Typ powiązania
Zgłoszenie
is blocked by
AU-09(07) Store on Component with Different Operating System – Assessment Procedure
NIST
-
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final