AU-16(1)

Requirement

Preserve the identity of individuals in cross-organizational audit trails.

Discussion

Identity preservation is applied when there is a need to be able to trace actions that are performed across organizational boundaries to a specific individual.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Audit and accountability policy; system security plan; privacy plan; procedures addressing cross-organizational audit trails; system design documentation; system configuration settings and associated documentation; system audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with cross-organizational audit responsibilities; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Mechanisms implementing cross-organizational auditing (if applicable)].

ID	Assessment Objectives
AU-16(01)	the identity of individuals in cross-organizational audit trails is preserved.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!