WORKSHEET: CREATING AN AUDIT PLAN

Control Name

Control

Assessment Objective

Internal / Inherited

Use of External Information Systems

AC-21(1).1

Determine if the information system employs automated mechanisms to enable authorized users to make information-sharing decisions based on access authorizations of sharing partners and access restrictions on information to be shared.

Content of Audit Records

AU-3(2).1

Determine if: the organization defines the information system components for which the content of audit records generated is centrally managed; and the organization centrally manages the content of audit records generated by organization-defined information system components.

Information Systems Connections

CA-3.1

Determine if the organization identifies connections to external information systems (i.e., information systems outside of the authorization boundary); the organization authorizes connections from the information system to external information systems through the use of Interconnection Security Agreements; the organization documents, for each connection, the interface characteristics, security requirements, and the nature of the information communicated; and the organization monitors the information system connections on an ongoing basis to verify enforcement of security requirements.

Incident Monitoring

IR-5(1)

Determine if the organization employs automated mechanisms to assist in the tracking of security incidents; the organization employs automated mechanisms to assist in the collection of security incident information; and the organization employs automated mechanisms to assist in the analysis of security incident information.

Control Number:

Definition:

Comments

1.

2.

3.

4.

5.

6.

7.