id: "AU-14(01)" title: "System Start-up" family: "AU" family_name: "Audit and Accountability" sort_id: "au-14.01" priority: "P2" implementation_level: "system" parent: "AU-14" enhancement: True
Statement
Initiate session audits automatically at system start-up.
Guidance
The automatic initiation of session audits at startup helps to ensure that the information being captured on selected individuals is complete and not subject to compromise through tampering by malicious threat actors.
Assessment Objective
session audits are initiated automatically at system start-up.
Audit and accountability policy
system security plan
privacy plan
procedures addressing user session auditing
system design documentation
system configuration settings and associated documentation
system audit records
other relevant documents or records
Organizational personnel with information security and privacy responsibilities
system/network administrators
system developers
Mechanisms implementing user session auditing capability