Navigate

• Top
• Description
• Related
• Enhancements
• CCIs

MA-4 (1)

MA-4 (1): Auditing And Review

The organization:

• MA-4 (1)(a): Audits nonlocal maintenance and diagnostic sessions [Assignment: organization-defined audit events]; and

• MA-4 (1)(b): Reviews the records of the maintenance and diagnostic sessions.

Supplemental

None

CIA Levels
Confidentiality	unknown
Integrity	moderate
Availability	unknown

Overlays
Int-A, Int-B, Int-C

Related Controls

The controls below (if any) were marked by NIST as being related to MA-4 (1).

Control	Description
AU-2	The organization: AU-2a.: Determines that the information system is capable of auditing the following events: [Assignment: organization-defined auditable events]; AU-2b.: Coordinates the security audit function with other organizational entities requiring audit-related information to enhance mutual support and to help guide the selection of auditable events; AU-2c.: Provides a rationale for why the auditable events are deemed to be adequate to support after-the-fact investigations of security incidents; and AU-2d.: Determines that the following events are to be audited within the information system: [Assignment: organization-defined audited events (the subset of the auditable events defined in AU-2 a.) along with the frequency of (or situation requiring) auditing for each identified event].
AU-6	The organization: AU-6a.: Reviews and analyzes information system audit records [Assignment: organization-defined frequency] for indications of [Assignment: organization-defined inappropriate or unusual activity]; and AU-6b.: Reports findings to [Assignment: organization-defined personnel or roles].
AU-12	The information system: AU-12a.: Provides audit record generation capability for the auditable events defined in AU-2 a. at [Assignment: organization-defined information system components]; AU-12b.: Allows [Assignment: organization-defined personnel or roles] to select which auditable events are to be audited by specific components of the information system; and AU-12c.: Generates audit records for the events defined in AU-2 d. with the content defined in AU-3.

Enhancements

The controls below (if any) add on to the requirements of MA-4 (1).

Control	Description
No controls

Related CCIs

The CCIs below are tied to MA-4 (1).

CCI	Definition
CCI-002884	The organization audits nonlocal maintenance and diagnostic sessions^ organization-defined audit events.
CCI-002885	The organization defines the nonlocal maintenance and diagnostic session audit events to audit.
CCI-002886	The organization reviews the records of the nonlocal maintenance and diagnostic sessions.