CCI-001814

Implementation Guidance

The organization being inspected/assessed leverages only information systems which support auditing of enforcement actions.

Validation Procedures

The organization conducting the inspection/assessment reviews vendor documentation to ensure the information system supports auditing of the enforcement actions. If vendor documentation is not available, the organization conducting the inspection/assessment tests the information system for the capability.

Compelling Evidence

1.) Documentation or assessment test results of audits