manage.get.gov/docs/compliance/dist/system-security-plans/ato/ac-6.9.md

implementation-status	control-origination
c-implemented	c-inherited-cloud-gov

ac-6.9 - [catalog] Log Use of Privileged Functions

Control Statement

Log the execution of privileged functions.

Control guidance

The misuse of privileged functions, either intentionally or unintentionally by authorized users or by unauthorized external entities that have compromised system accounts, is a serious and ongoing concern and can have significant adverse impacts on organizations. Logging and analyzing the use of privileged functions is one way to detect such misuse and, in doing so, help mitigate the risk from insider threats and the advanced persistent threat.

Control assessment-objective

the execution of privileged functions is logged.

---

What is the solution and how is it implemented?

cloud.gov automatically logs privileged actions taken within cloud.gov.

---