CCI-001927

Implementation Guidance

Determine if cross-Organizational audit information is provided to [AU-16(02)_ODP[01]; organizations with which cross-Organizational audit information is to be shared are defined] based on [AU-16(02)_ODP[02]; cross-Organizational sharing agreements to be used when providing cross-Organizational audit information to organizations are defined].

Validation Procedures

Examine: [SELECT FROM: Audit and accountability policy; system security plan; privacy plan; procedures addressing cross-organizational sharing of audit information; information sharing agreements; other relevant documents or records]. Interview: [SELECT FROM: Organizational personnel with responsibilities for sharing cross-organizational audit information; organizational personnel with information security and privacy responsibilities].