← Back to catalog
AU-12(4)
Query Parameter Audits of Personally Identifiable Information
Audit and Accountability (AU)
Baselines
Low · Not includedModerate · Not includedHigh · Not included
Description
Provide and implement the capability for auditing the parameters of user query events for data sets containing personally identifiable information.
Discussion
Query parameters are explicit criteria that an individual or automated system submits to a system to retrieve data. Auditing of query parameters for datasets that contain personally identifiable information augments the capability of an organization to track and understand the access, usage, or sharing of personally identifiable information by authorized personnel.
Implementation guidance
No content available.
CSF 2.0 crosswalk
No CSF mappings exist for this control.