AU-12a: Audit Generation The information system: Provides audit record generation capability for the list of auditable events defined in at [Assignment: organization-defined information system components]; … DoD parameter: [all information system and network components where audit capability is deployed/available)] FedRAMP baseline parameter: [all information system components where audit capability is deployed] AU-12a Control Summary Information Responsible Role: Parameter: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation equivalence (explain – Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> AU-12 What is the solution and how is it implemented? Assessment and Authorization (CA) Assessment and Authorization (CA) Additional controls – CA-2(2) Security Assessments Enhancement – The organization includes as part of security control assessments, [Assignment:
AU-12a: Audit Generation The information system: Provides audit record generation capability for the list of auditable events defined in at [Assignment: organization-defined information system components]; … DoD parameter: [all information system and network components where audit capability is deployed/available)] FedRAMP baseline parameter: [all information system components where audit capability is deployed] AU-12a Control Summary Information Responsible Role: Parameter: Implementation Status (check all that apply): Implemented Partially implemented Planned Alternative implementation – equivalence (explain Not applicable Control Origination (check all that apply): Service Provider Corporate Service Provider System Specific Service Provider Hybrid (Corporate and System Specific) Configured by Customer (Customer System Specific) Provided by Customer (Customer System Specific) Shared (Service Provider and Customer Responsibility) Inherited from pre-existing Provisional Authorization (PA) for <Information System Name>, <Date of PA> AU-12 What is the solution and how is it implemented? Assessment and Authorization (CA) Assessment and Authorization (CA) – Additional controls CA-2(2) – Security Assessments Enhancement The organization includes as part of security control assessments, [Assignment:
U_CSM_level_4_saas_template.docx