AT-4 Control Summary Information Responsible Role: Parameter AT-4(b): Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , AT-4 What is the solution and how is it implemented? Part a Part b Audit and Accountability (AU) AU-1 Audit and Accountability Policy and Procedures (L) (M) The organization: and and that and and the the and and and the Audit and policy and Audit and
AT-4 Control Summary Information Responsible Role: Parameter AT-4(b): Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , AT-4 What is the solution and how is it implemented? Part a Part b Audit and Accountability (AU) AU-1 Audit and Accountability Policy and Procedures (L) (M) The organization: Audit Audit policy and and and and and and and and and and that the the the
FedRAMP-SSP-Moderate-Baseline-Template.docx