💼 AU-6 Audit Record Review, Analysis, and Reporting (L)(M)(H)
- ID:
/frameworks/fedramp-moderate-security-controls/au/06
Description
a. Review and analyze system audit records [FedRAMP Assignment: at least weekly] for indications of [Assignment: organization-defined inappropriate or unusual activity] and the potential impact of the inappropriate or unusual activity;
b. Report findings to [Assignment: organization-defined personnel or roles]; and
c. Adjust the level of audit record review, analysis, and reporting within the system when there is a change in risk based on law enforcement information, intelligence information, or other credible sources of information.
AU-6 Additional FedRAMP Requirements and Guidance:
Requirement: Coordination between service provider and consumer shall be documented and accepted by the JAB/AO. In multi-tenant environments, capability and means for providing review, analysis, and reporting to consumer for data pertaining to consumer shall be documented.
Similar
- Sections
/frameworks/fedramp-high-security-controls/au/06
- Internal
- ID:
dec-c-9bf5fa59
- ID:
Similar Sections (Take Policies From)
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 FedRAMP High Security Controls → 💼 AU-6 Audit Record Review, Analysis, and Reporting (L)(M)(H) | 6 | 20 | 32 | no data |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags | Compliance |
|---|---|---|---|---|---|
| 💼 AU-6(1) Automated Process Integration (M)(H) | 3 | no data | |||
| 💼 AU-6(3) Correlate Audit Record Repositories (M)(H) | 8 | no data |