id: "AU-14(01)" title: "System Start-up" family: "AU" family_name: "Audit and Accountability" sort_id: "au-14.01" priority: "P2" implementation_level: "system" parent: "AU-14" enhancement: True


Statement

Initiate session audits automatically at system start-up.

Guidance

The automatic initiation of session audits at startup helps to ensure that the information being captured on selected individuals is complete and not subject to compromise through tampering by malicious threat actors.

Assessment Objective

session audits are initiated automatically at system start-up.

Audit and accountability policy

system security plan

privacy plan

procedures addressing user session auditing

system design documentation

system configuration settings and associated documentation

system audit records

other relevant documents or records

Organizational personnel with information security and privacy responsibilities

system/network administrators

system developers

Mechanisms implementing user session auditing capability