10.2.5 Use of and changes to identification and authentication Interview personnel mechanisms–including but not limited to creation of Observe audit logs new accounts and elevation of privileges and all – Examine audit log settings changes, additions, or deletions to accounts with root [Fill out per your OST-approved 3rd or administrative privileges? party vendor.] 10.3 Are the following trail entries recorded for all system components for each event: 10.3.1 User identification? Interview personnel Observe audit logs Examine audit log settings [Fill out per your OST-approved 3rd party vendor.] 10.3.2 Type of Interview personnel Observe audit logs Examine audit log settings [Fill out per your OST-approved 3rd vendor.] 10.3.3 Date and time? Interview personnel Observe audit logs Examine log settings [Fill out per your OST-approved 3rd party vendor.] 10.3.4 Success or failure indication? Interview personnel Observe audit logs Examine audit log settings [Fill out per your OST-approved 3rd party vendor.]
10.2.5 Use of and changes to identification and authentication mechanisms–including but not limited to creation of new accounts and elevation of privileges – and all changes, additions, or deletions to accounts with root or administrative privileges? Interview personnel Observe audit logs Examine audit log settings [Fill out per your OST-approved 3rd party vendor.] 10.3 Are the following trail entries recorded for all system components for each event: 10.3.1 User identification? Interview personnel Observe audit logs Examine audit log settings [Fill out per your OST-approved 3rd party vendor.] 10.3.2 Type of Interview personnel Observe audit logs Examine audit log settings [Fill out per your OST-approved 3rd vendor.] 10.3.3 Date and time? Interview personnel Observe audit logs Examine log settings [Fill out per your OST-approved 3rd party vendor.] 10.3.4 Success or failure indication? Interview personnel Observe audit logs Examine audit log settings [Fill out per your OST-approved 3rd party vendor.]