usnistgov / FederalProfile-8259A

4 stars 8 forks source link

Clarification of bullet about coordinating audit process #71

Closed jmarron-acd closed 4 years ago

jmarron-acd commented 4 years ago

There is a bullet in Audit Support which states:

I think there are two needs: 1) I think this bullet needs clarification, if possible. I'm not sure it's clear what is meant by "coordinate with other organizational entities" since this is referring to a device. Maybe those specific words could be eliminated. Not sure if that makes the bullet crystal clear. 2) I think we should consider making this bullet a sub-bullet of the bullet immediately above it which states "Ability to run an internal audit (automated or otherwise) to provide the information requested for an external process to audit the device."

jmarron-acd commented 4 years ago

Comment from Kevin Brady during our discussion: "The device may need to coordinate with other entities in the information system during the auditing process"

jmarron-acd commented 4 years ago

One other comment I had written. Since the 2nd sentence of the bullet says "possibly need to..." one option is to delete this sentence...or maybe the word "possibly".