FedRAMP Controls / AC

AC-6(9) Log Use of Privileged Functions

Family AC
Baselines moderate
Mapped KSIs 3

Control statement

Log the execution of privileged functions.

Parameter placeholders {{ insert: param, … }} reference FedRAMP-set values in the resolved profile. Full parameter map is preserved in the catalog database.

Covered by these Key Security Indicators

KSITitleCategory
KSI-IAM-04Just-in-Time Authorization
Use a least-privileged, role and attribute-based, and just-in-time security authorization model for all user and non-user accounts and services.
Identity and Access Management
KSI-MLA-02Audit Logging
_Persistently_ review and audit logs.
Monitoring, Logging, and Auditing
KSI-MLA-07Event Types
Maintain a list of information resources and event types that will be monitored, logged, and audited, then do so.
Monitoring, Logging, and Auditing