Assessment Objective
Determine if:
- AU-06(07) the permitted actions for each [Selection (one or more): system process; role; user] associated with the review, analysis, and reporting of audit record information are specified.
Assessment Methods
Examine
- Audit and accountability policy
- procedures addressing process, role and/or user permitted actions from audit review, analysis, and reporting
- system security plan
- privacy plan
- other relevant documents or records
Interview
- Organizational personnel with audit review, analysis, and reporting responsibilities
- organizational personnel with information security and privacy responsibilities
Test
- Mechanisms supporting permitted actions for the review, analysis, and reporting of audit information
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | AU-06(07) Permitted Actions |