Detections
Analytics
800-53|AU-6(7)
Title
PERMITTED ACTIONSDescription
The organization specifies the permitted actions for each [Selection (one or more): information system process; role; user] associated with the review, analysis, and reporting of audit information.Supplemental
Organizations specify permitted actions for information system processes, roles, and/or users associated with the review, analysis, and reporting of audit records through account management techniques. Specifying permitted actions on audit information is a way to enforce the principle of least privilege. Permitted actions are enforced by the information system and include, for example, read, write, execute, append, and delete.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Category: AUDIT AND ACCOUNTABILITY
Parent Title: AUDIT REVIEW, ANALYSIS, AND REPORTING
Family: AUDIT AND ACCOUNTABILITY