AU-6(7)

Requirement

Specify the permitted actions for each [Selection (one or more): system process; role; user] associated with the review, analysis, and reporting of audit record information.

Discussion

Organizations specify permitted actions for system processes, roles, and users associated with the review, analysis, and reporting of audit records through system account management activities. Specifying permitted actions on audit record information is a way to enforce the principle of least privilege. Permitted actions are enforced by the system and include read, write, execute, append, and delete.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Audit and accountability policy; procedures addressing process, role and/or user permitted actions from audit review, analysis, and reporting; system security plan; privacy plan; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with audit review, analysis, and reporting responsibilities; organizational personnel with information security and privacy responsibilities].

Test

[SELECT FROM: Mechanisms supporting permitted actions for the review, analysis, and reporting of audit information].

ID	Assessment Objectives
AU-06(07)	the permitted actions for each <AU-06(07)_ODP SELECTED PARAMETER VALUES> associated with the review, analysis, and reporting of audit record information are specified.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!