id: "AU-06(01)" title: "Automated Process Integration" family: "AU" family_name: "Audit and Accountability" sort_id: "au-06.01" priority: "P2" implementation_level: "organization" parent: "AU-06" enhancement: True
Statement
Integrate audit record review, analysis, and reporting processes using {{ insert: param, au-06.01_odp }}.
Guidance
Organizational processes that benefit from integrated audit record review, analysis, and reporting include incident response, continuous monitoring, contingency planning, investigation and response to suspicious activities, and Inspector General audits.
Assessment Objective
audit record review, analysis, and reporting processes are integrated using {{ insert: param, au-06.01_odp }}.
Audit and accountability policy
system security plan
privacy plan
procedures addressing audit review, analysis, and reporting
procedures addressing investigation and response to suspicious activities
system design documentation
system configuration settings and associated documentation
system audit records
other relevant documents or records
Organizational personnel with audit review, analysis, and reporting responsibilities
organizational personnel with information security and privacy responsibilities
Automated mechanisms integrating audit review, analysis, and reporting processes