AU-14(1)

Requirement

Initiate session audits automatically at system start-up.

Discussion

The automatic initiation of session audits at startup helps to ensure that the information being captured on selected individuals is complete and not subject to compromise through tampering by malicious threat actors.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Audit and accountability policy; system security plan; privacy plan; procedures addressing user session auditing; system design documentation; system configuration settings and associated documentation; system audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with information security and privacy responsibilities; system/network administrators; system developers].

Test

[SELECT FROM: Mechanisms implementing user session auditing capability].

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!