FedRAMP Automated Audit Actions AC-2 (4)
Overview:
The information system automatically audits account creation, modification, enabling, disabling, and removal actions, and notifies [Assignment: organization-defined personnel or roles].
Related controls: AU-2, AU-12
Action Items:
1) Enable logging and monitoring of account management activities
Related Documents:
1) Logging and Monitoring Policy
2) Identity and Access Management Policy
Additional Guidance:
Moderate FedRAMP-Defined Assignment / Selection Parameters
none
Moderate Additional FedRAMP Requirements and Guidance
none