Inherited from pre-existing FedRAMP Authorization for , AU-7 (1) What is the solution and how is it implemented? AU-8 Time Stamps The information system: Uses internal system clocks to generate time stamps for audit records; and Records time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT) and meets [Assignment: one second granularity of time measurement]. AU-8 Control Summary Information Responsible Role: Parameter AU-8(b): Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , AU-8 What is the solution and how is it implemented? Part a Part b AU-8 (1) Control Enhancement The information system: Compares the internal information system clocks with [FedRAMP Assignment: authoritative time source: [] [at least hourly]]; and
Inherited from pre-existing FedRAMP Authorization for , AU-7 (1) What is the solution and how is it implemented? AU-8 Time Stamps The information system: Uses internal system clocks to generate time stamps for audit records; and Records time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT) and meets [Assignment: one second granularity of time measurement]. AU-8 Control Summary Information Responsible Role: Parameter AU-8(b): Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , AU-8 What is the solution and how is it implemented? Part a Part b AU-8 (1) Control Enhancement The information system: Compares the internal information system clocks with [FedRAMP Assignment: authoritative time source: [] [at least hourly]]; and
FedRAMP_System_Security_Plan_(Low_and_Moderate).docx