AU-6(3)

Requirement

Analyze and correlate audit records across different repositories to gain organization-wide situational awareness.

Discussion

Organization-wide situational awareness includes awareness across all three levels of risk management (i.e., organizational level, mission/business process level, and information system level) and supports cross-organization awareness.

Title

Audit Record Review, Analysis, and Reporting | Correlate Audit Record Repositories
Family

Audit and Accountability
NIST 800-53B Baseline(s)
- Moderate
- High

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Audit and accountability policy; system security plan; privacy plan; procedures addressing audit review, analysis, and reporting; system design documentation; system configuration settings and associated documentation; system audit records across different repositories; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with audit review, analysis, and reporting responsibilities; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Mechanisms supporting the analysis and correlation of audit records].

ID	Assessment Objectives
AU-06(03)	audit records across different repositories are analyzed and correlated to gain organization-wide situational awareness.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!