AU-1: Policy and Procedures
An OSCAL Control
-
-
personnel or roles
personnel or roles to whom the audit and accountability procedures are to be disseminated is/are defined;
-
events
events that would require the current audit and accountability policy to be reviewed and updated are defined;
-
events
events that would require audit and accountability procedures to be reviewed and updated are defined;
-
personnel or roles
personnel or roles to whom the audit and accountability policy is to be disseminated is/are defined;
-
official
an official to manage the audit and accountability policy and procedures is defined;
-
frequency
the frequency at which the current audit and accountability policy is reviewed and updated is defined;
-
frequency
the frequency at which the current audit and accountability procedures are reviewed and updated is defined;