Assessment Objective
Determine if:
- AU-14(03)[01] the capability for authorized users to remotely view and hear content related to an established user session in real time is provided;
- AU-14(03)[02] the capability for authorized users to remotely view and hear content related to an established user session in real time is implemented.
Assessment Methods
Examine
- Audit and accountability policy
- system security plan
- privacy plan
- procedures addressing user session auditing
- system design documentation
- system configuration settings and associated documentation
- system audit records
- other relevant documents or records
Interview
- Organizational personnel with information security and privacy responsibilities
- system/network administrators
- system developers
- legal counsel
- personnel with civil liberties responsibilities
Test
- Mechanisms implementing user session auditing capability
Pedidos ligados
| Tipo de ligação | Pedido |
|---|---|
| blocks | AU-14(03) Remote Viewing and Listening |