AU-6.4: Central Review and Analysis

the capability to centrally review and analyze audit records from multiple components within the system is provided;

the capability to centrally review and analyze audit records from multiple components within the system is implemented.

Audit and accountability policy

procedures addressing audit review, analysis, and reporting

system design documentation

system configuration settings and associated documentation

system security plan

privacy plan

system audit records

other relevant documents or records

Organizational personnel with audit review, analysis, and reporting responsibilities

organizational personnel with information security and privacy responsibilities

system developers

System capability to centralize review and analysis of audit records