AU-9 (3) What is the solution and how is it implemented? AU-9 (4) Control Enhancement The organization authorizes access to management of audit functionality to only [Assignment: organization-defined subset of privileged users]. AU-9 (4) Control Summary Information Responsible Role: Parameter AU-9(4): Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , AU-9 (4) What is the solution and how is it implemented? AU-10 Non-repudiation The information system protects against an individual (or process acting on behalf of an individual) falsely denying having performed [FedRAMP Assignment: minimum actions including the addition, modification, deletion, approval, sending, or receiving of data]. AU-10 Control Summary Information Responsible Role: Parameter AU-10: Implementation Status (check all that apply): Implemented Partially implemented
AU-9 (3) What is the solution and how is it implemented? AU-9 (4) Control Enhancement The organization authorizes access to management of audit functionality to only [Assignment: organization-defined subset of privileged users]. AU-9 (4) Control Summary Information Responsible Role: Parameter AU-9(4): Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing FedRAMP Authorization for , AU-9 (4) What is the solution and how is it implemented? AU-10 Non-repudiation The information system protects against an individual (or process acting on behalf of an individual) falsely denying having performed [FedRAMP Assignment: minimum actions including the addition, modification, deletion, approval, sending, or receiving of data]. AU-10 Control Summary Information Responsible Role: Parameter AU-10: Implementation Status (check all that apply): Implemented Partially implemented
FedRAMP_System_Security_Plan_(High).docx