6. AU-2 Audit Events The system continuously logs for the following: Inherited Partially-Inherited Successful and unsuccessful account login attempts Describe here the frequency with which event Account management events logs are reviewed. Object access, policy change Privilege functions, process tracking System events For web applications, the system also continuously logs the following: All administrator activity Authentication checks Authorization checks Data deletions Data access Data changes permission changes These event logs are reviewed on a regular basis as described in the Modification Statement column to the right. 7. AU-8 Time Stamps The logs generated above are time Inherited Partially-Inherited synchronized and time-stamped in coordinated universal time (UTC). 8. AU-9 Protection of Information The event logs are protected from Inherited Partially-Inherited unauthorized access, modification, and deletion. 9. AU-12 Audit Generation All information system and network Inherited Partially-Inherited components generating logs as described in AU-2 above. 10. CA-2 (1) Security Assessments, An independent assessor has assessed the Inherited Partially-Inherited Independent Assessors system with focus on the security “Required” controls. 11. CA-5 Plan of Action and Milestones A POA&M for the system exists and is updated Inherited Partially-Inherited (POA&M) at least monthly in accordance with the FedRAMP Tailored Continuous Monitoring Guide.
6. AU-2 Audit Events The system continuously logs for the following: Successful and unsuccessful account login attempts Account management events Object access, policy change Privilege functions, process tracking System events For web applications, the system also continuously logs the following: All administrator activity Authentication checks Authorization checks Data deletions Data access Data changes permission changes These event logs are reviewed on a regular basis as described in the Modification Statement column to the right. Inherited Partially-Inherited Describe here the frequency with which event logs are reviewed. 7. AU-8 Time Stamps The logs generated above are time synchronized and time-stamped in coordinated universal time (UTC). Inherited Partially-Inherited 8. AU-9 Protection of Information The event logs are protected from unauthorized access, modification, and deletion. Inherited Partially-Inherited 9. AU-12 Audit Generation All information system and network components generating logs as described in AU-2 above. Inherited Partially-Inherited 10. CA-2 (1) Security Assessments, Independent Assessors An independent assessor has assessed the system with focus on the “Required” security controls. Inherited Partially-Inherited 11. CA-5 Plan of Action and Milestones (POA&M) A POA&M for the system exists and is updated at least monthly in accordance with the FedRAMP Tailored Continuous Monitoring Guide. Inherited Partially-Inherited
APPENDIX%20E%20-%20FedRAMP%20Tailored%20LI-SaaS%20Self-Attestation%20Requirements.docx