CCI-001868

The organization specifies the permitted actions for each information system process, role, and/or user associated with the review and analysis of audit information.

Implementation Guidance

The organization being inspected/assessed specifies and documents the permitted actions for each information system process, role, and/or user associated with the review and analysis of audit information.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the documented permitted actions to ensure the organization being inspected/assessed specifies the permitted actions for each information system process, role, and/or user associated with the review and analysis of audit information.

Compelling Evidence

1.) Documentation that specifies the permitted actions for each information system process, role, and/or user associated with the review and analysis of audit information 2.) Signed and dated audit and accountability policy

The controls below (if any) were marked by NIST as being related to CCI-001868.