id: "AU-16(01)" title: "Identity Preservation" family: "AU" family_name: "Audit and Accountability" sort_id: "au-16.01" priority: "P2" implementation_level: "organization" parent: "AU-16" enhancement: True
Statement
Preserve the identity of individuals in cross-organizational audit trails.
Guidance
Identity preservation is applied when there is a need to be able to trace actions that are performed across organizational boundaries to a specific individual.
Assessment Objective
the identity of individuals in cross-organizational audit trails is preserved.
Audit and accountability policy
system security plan
privacy plan
procedures addressing cross-organizational audit trails
system design documentation
system configuration settings and associated documentation
system audit records
other relevant documents or records
Organizational personnel with cross-organizational audit responsibilities
organizational personnel with information security and privacy responsibilities
Mechanisms implementing cross-organizational auditing (if applicable)