id: "AU-06(01)" title: "Automated Process Integration" family: "AU" family_name: "Audit and Accountability" sort_id: "au-06.01" priority: "P2" implementation_level: "organization" parent: "AU-06" enhancement: True


Statement

Integrate audit record review, analysis, and reporting processes using {{ insert: param, au-06.01_odp }}.

Guidance

Organizational processes that benefit from integrated audit record review, analysis, and reporting include incident response, continuous monitoring, contingency planning, investigation and response to suspicious activities, and Inspector General audits.

Assessment Objective

audit record review, analysis, and reporting processes are integrated using {{ insert: param, au-06.01_odp }}.

Audit and accountability policy

system security plan

privacy plan

procedures addressing audit review, analysis, and reporting

procedures addressing investigation and response to suspicious activities

system design documentation

system configuration settings and associated documentation

system audit records

other relevant documents or records

Organizational personnel with audit review, analysis, and reporting responsibilities

organizational personnel with information security and privacy responsibilities

Automated mechanisms integrating audit review, analysis, and reporting processes