Description
a. Provide and implement the capability for [Assignment: organization-defined users or roles] to [Selection (one or more): record; view; hear; log] the content of a user session under [Assignment: organization-defined circumstances]; and b. Develop, integrate, and use session auditing activities in consultation with legal counsel and in accordance with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines.
Supplemental Guidance
Session auditing activities are developed, integrated, and used in consultation with legal counsel and in accordance with applicable laws, executive orders, directives, regulations, policies, standards, and guidelines. Session auditing includes the real-time monitoring of activities in user sessions and the capture, recording, and logging of activities in user sessions.
Changes from Rev 4
No significant changes from Rev 4.