inspected/assessed configures the information system to implement an alternative audit capability in the event of a failure in primary audit capability that provides the alternative audit functionality defined in AU-15, CCI 1921. For information system components that have applicable STIGs or SRGs, the organization conducting the inspection/assessment evaluates the components to ensure that the organization being inspected/assessed has configured the information system in compliance with the applicable STIGs and SRGs pertaining to CCI 1922. AU-16 AU-16 blank The organization NIST has not conducting the allocated this inspection/assessment AP. Therefore, obtains and examines the this AP is not documented audit applicable. information to ensure the organization being inspected/assessed defines the audit information to be coordinated among external organizations when audit information is transmitted across organizational boundaries. DoD has determined the methods are not appropriate to define at the Enterprise level. AU-16 blank blank The organization NIST has not AU-16 conducting the allocated this inspection/assessment AP. Therefore, obtains and examines the this AP is not documented methods to applicable. ensure the organization being inspected/assessed defines the methods to be employed when coordinating audit information among
inspected/assessed configures the information system to implement an alternative audit capability in the event of a failure in primary audit capability that provides the alternative audit functionality defined in AU-15, CCI 1921. For information system components that have applicable STIGs or SRGs, the organization conducting the inspection/assessment evaluates the components to ensure that the organization being inspected/assessed has configured the information system in compliance with the applicable STIGs and SRGs pertaining to CCI 1922. AU-16 AU-16 blank The organization conducting the inspection/assessment obtains and examines the documented audit information to ensure the organization being inspected/assessed defines the audit information to be coordinated among external organizations when audit information is transmitted across organizational boundaries. DoD has determined the methods are not appropriate to define at the Enterprise level. NIST has not allocated this AP. Therefore, this AP is not applicable. AU-16 AU-16 blank blank The organization conducting the inspection/assessment obtains and examines the documented methods to ensure the organization being inspected/assessed defines the methods to be employed when coordinating audit information among NIST has not allocated this AP. Therefore, this AP is not applicable.
RMF_Audit-and-Accountability-Plan.docx