CyberStrikeus/CyberStrike - Page 119

at-1-policy-and-procedures

Develop, document, and disseminate to [organization-defined]: [organization-defined] awareness and training policy that: Procedures to facilitate the

at-2-1-practical-exercises

Provide practical exercises in literacy training that simulate events and incidents.

at-2-2-insider-threat

Provide literacy training on recognizing and reporting potential indicators of insider threat.

at-2-3-social-engineering-and-mining

Provide literacy training on recognizing and reporting potential and actual instances of social engineering and social mining.

at-2-4-suspicious-communications-and-anomalous-system-behavior

Provide literacy training on recognizing suspicious communications and anomalous behavior in organizational systems using [organization-defined].

at-2-5-advanced-persistent-threat

Provide literacy training on the advanced persistent threat.

at-2-6-cyber-threat-environment

Provide literacy training on the cyber threat environment;

at-2-literacy-training-and-awareness

Provide security and privacy literacy training to system users (including managers, senior executives, and contractors): As part of initial training f

at-3-1-environmental-controls

Provide [organization-defined] with initial and [organization-defined] training in the employment and operation of environmental controls.

at-3-2-physical-security-controls

Provide [organization-defined] with initial and [organization-defined] training in the employment and operation of physical security controls.

at-3-3-practical-exercises

Provide practical exercises in security and privacy training that reinforce training objectives.

at-3-4-suspicious-communications-and-anomalous-system-behavior

Suspicious Communications and Anomalous System Behavior

at-3-5-processing-personally-identifiable-information

Provide [organization-defined] with initial and [organization-defined] training in the employment and operation of personally identifiable information

at-3-role-based-training

Provide role-based security and privacy training to personnel with the following roles and responsibilities: [organization-defined]: Before authorizin

at-4-training-records

Document and monitor information security and privacy training activities, including security and privacy awareness training and specific role-base...

at-5-contacts-with-security-groups-and-associations

Contacts with Security Groups and Associations

at-6-training-feedback

Provide feedback on organizational training results to the following personnel [organization-defined]: [organization-defined].

au-1-policy-and-procedures

Develop, document, and disseminate to [organization-defined]: [organization-defined] audit and accountability policy that: Procedures to facilitate th

au-10-1-association-of-identities

Bind the identity of the information producer with the information to [organization-defined] ;

au-10-2-validate-binding-of-information-producer-identity

Validate the binding of the information producer identity to the information at [organization-defined] ;

au-10-3-chain-of-custody

Maintain reviewer or releaser credentials within the established chain of custody for information reviewed or released.

au-10-4-validate-binding-of-information-reviewer-identity

Validate the binding of the information reviewer identity to the information at the transfer or release points prior to release or transfer between...

au-10-5-digital-signatures

Digital Signatures

au-10-non-repudiation

Provide irrefutable evidence that an individual (or process acting on behalf of an individual) has performed [organization-defined].

au-11-1-long-term-retrieval-capability

Employ [organization-defined] to ensure that long-term audit records generated by the system can be retrieved.

au-11-audit-record-retention

Retain audit records for [organization-defined] to provide support for after-the-fact investigations of incidents and to meet regulatory and organizat

au-12-1-system-wide-and-time-correlated-audit-trail

Compile audit records from [organization-defined] into a system-wide (logical or physical) audit trail that is time-correlated to within [organization

au-12-2-standardized-formats

Produce a system-wide (logical or physical) audit trail composed of audit records in a standardized format.

au-12-3-changes-by-authorized-individuals

Provide and implement the capability for [organization-defined] to change the logging to be performed on [organization-defined] based on [organization

au-12-audit-record-generation

Provide audit record generation capability for the event types the system is capable of auditing as defined in [AU-2a](#au-2_smt.a) on [organizatio...

au-13-1-use-of-automated-tools

Monitor open-source information and information sites using [organization-defined].

au-13-2-review-of-monitored-sites

Review the list of open-source information sites being monitored [organization-defined].

au-13-3-unauthorized-replication-of-information

Employ discovery techniques, processes, and tools to determine if external entities are replicating organizational information in an unauthorized mann

au-13-monitoring-for-information-disclosure

Monitor [organization-defined] [organization-defined] for evidence of unauthorized disclosure of organizational information;

au-14-1-system-start-up

Initiate session audits automatically at system start-up.

au-14-2-capture-and-record-content

Capture and Record Content

au-14-3-remote-viewing-and-listening

Provide and implement the capability for authorized users to remotely view and hear content related to an established user session in real time.

au-14-session-audit

Provide and implement the capability for [organization-defined] to [organization-defined] the content of a user session under [organization-defined] ;

au-15-alternate-audit-logging-capability

Alternate Audit Logging Capability

au-16-1-identity-preservation

Preserve the identity of individuals in cross-organizational audit trails.