Skip to Content

FedRAMP Automated Audit Actions AC-2 (4)

Overview:
The information system automatically audits account creation, modification, enabling, disabling, and removal actions, and notifies [Assignment: organization-defined personnel or roles].


Related controls: AU-2, AU-12


Action Items:
1) Enable logging and monitoring of account management activities


Related Documents:
1) Logging and Monitoring Policy

2) Identity and Access Management Policy


Additional Guidance:
Moderate FedRAMP-Defined Assignment / Selection Parameters
none


Moderate Additional FedRAMP Requirements and Guidance
none