id: "AU-06(03)" title: "Correlate Audit Record Repositories" family: "AU" family_name: "Audit and Accountability" sort_id: "au-06.03" priority: "P2" implementation_level: "organization" parent: "AU-06" enhancement: True
Statement
Analyze and correlate audit records across different repositories to gain organization-wide situational awareness.
Guidance
Organization-wide situational awareness includes awareness across all three levels of risk management (i.e., organizational level, mission/business process level, and information system level) and supports cross-organization awareness.
Assessment Objective
audit records across different repositories are analyzed and correlated to gain organization-wide situational awareness.
Audit and accountability policy
system security plan
privacy plan
procedures addressing audit review, analysis, and reporting
system design documentation
system configuration settings and associated documentation
system audit records across different repositories
other relevant documents or records
Organizational personnel with audit review, analysis, and reporting responsibilities
organizational personnel with information security and privacy responsibilities
Mechanisms supporting the analysis and correlation of audit records