Assessment Objective
Determine if:
- AU-06(08) a full text analysis of logged privileged commands in a physically distinct component or subsystem of the system or other system that is dedicated to that analysis is performed.
Assessment Methods
Examine
- Audit and accountability policy
- procedures addressing audit review, analysis, and reporting
- system design documentation
- system configuration settings and associated documentation
- text analysis tools and techniques
- text analysis documentation of audited privileged commands
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with audit review, analysis, and reporting responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Mechanisms implementing the capability to perform a full text analysis of audited privilege commands
Powiązane zgłoszenia
| Typ powiązania | Zgłoszenie |
|---|---|
| blocks | AU-06(08) Full Text Analysis of Privileged Commands |