CCI-002677

Implementation Guidance

The organization being inspected/assessed implements additional monitoring defined in SI-4 (20), CCI 2676 of privileged users. The organization must maintain an audit trail of additional monitoring.

Validation Procedures

The organization conducting the inspection/assessment obtains and examines the audit trail of additional monitoring to ensure the organization being inspected/assessed implements additional monitoring defined in SI-4 (20), CCI 2676 of privileged users.

Compelling Evidence

1.) Audit trail of additional monitoring defined in SI-4 (20), CCI 2676 of privileged users (located in Site's SSP).