MA-04(01) Logging and Review

(a) Log ma-4.1_prm_1 for nonlocal maintenance and diagnostic sessions; and

(b) Review the audit records of the maintenance and diagnostic sessions to detect anomalous behavior.

Parameter ID Definition
ma-4.1_prm_1 organization-defined audit events
ma-04.01_odp.01 audit events
ma-04.01_odp.02 audit events

Baselines

Guidance

Audit logging for nonlocal maintenance is enforced by AU-2 . Audit events are defined in [AU-2a](#au-2_smt.a).

Related controls 2