Control Enhancement AU-6 (1) AU-6 (1) The information system integrates audit review, analysis, and reporting processes to support organizational processes for investigation and response to suspicious activities. AU-6 (1) Control Enhancement Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Configured by customer Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> AU-6 (1) What is the solution and how is it implemented? Control Enhancement AU-6 (3) AU-6 (3) The organization analyzes and correlates audit records across different repositories to gain organization-wide situational awareness. AU-6 (3) Control Enhancement Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific
Control Enhancement AU-6 (1) AU-6 (1) The information system integrates audit review, analysis, and reporting processes to support organizational processes for investigation and response to suspicious activities. AU-6 (1) Control Enhancement Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Configured by customer Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> AU-6 (1) What is the solution and how is it implemented? Control Enhancement AU-6 (3) AU-6 (3) The organization analyzes and correlates audit records across different repositories to gain organization-wide situational awareness. AU-6 (3) Control Enhancement Summary Information Responsible Role: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific
System_Security_Plan_Template_101512_508.docx