AC-06(09) Log Use of Privileged Functions
Log the execution of privileged functions.
Baselines
- L
- M
- H
- P
Guidance
The misuse of privileged functions, either intentionally or unintentionally by authorized users or by unauthorized external entities that have compromised system accounts, is a serious and ongoing concern and can have significant adverse impacts on organizations. Logging and analyzing the use of privileged functions is one way to detect such misuse and, in doing so, help mitigate the risk from insider threats and the advanced persistent threat.
Related controls 3
- AU-02 Event Logging L M H P
- AU-03 Content of Audit Records L M H P
- AU-12 Audit Record Generation L M H P