Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , AU-6 (3) What is the solution and how is it implemented? AU-6 (4) Control Enhancement (H) The information system provides the capability to centrally review and analyze audit records from multiple components within the system. AU-6 (4) Control Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , AU-6 (4) What is the solution and how is it implemented? AU-6 (5) Control Enhancement (H) The organization integrates analysis of audit records with analysis of [FedRAMP Selection (one or more): vulnerability scanning information; performance data; information system monitoring information; penetration test data; [Assignment: organization-defined data/information collected from other sources]] to further enhance the ability to identify inappropriate or unusual activity.
Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , AU-6 (3) What is the solution and how is it implemented? AU-6 (4) Control Enhancement (H) The information system provides the capability to centrally review and analyze audit records from multiple components within the system. AU-6 (4) Control Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , AU-6 (4) What is the solution and how is it implemented? AU-6 (5) Control Enhancement (H) The organization integrates analysis of audit records with analysis of [FedRAMP Selection (one or more): vulnerability scanning information; performance data; information system monitoring information; penetration test data; [Assignment: organization-defined data/information collected from other sources]] to further enhance the ability to identify inappropriate or unusual activity.
FedRAMP-SSP-High-Baseline-Template-v1.2.docx