CCI-002147

Implementation Guidance

The organization being inspected/assessed monitors information system accounts for atypical use defined in AC-2 (12), CCI 2146. The organization must maintain an audit trail of monitoring.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of monitoring to ensure the organization being inspected/assessed monitors information system accounts for atypical use defined in AC-2 (12), CCI 2146.

Compelling Evidence

1.) Signed and dated documentation which defines the process for monitoring information system accounts for organization-defined atypical use. 2.) Audit trail of monitoring.