Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 668

Security Requirements for the IT Environment
Table A-2 Auditable Events and Audit Data
Section/Function Component
Account
Administration
FAU_GEN.2 User identity association (iteration 1)
FAU_GEN.2.1 The IT environment shall be able to associate each auditable event
with the identity of the user that caused the event.
FAU_SAR.1 Audit review
FAU_SAR.1.1 The IT environment shall provide Auditors with the capability to
read all information from the audit records.
FAU_SAR.1.2 The IT environment shall provide the audit records in a manner
suitable for the user to interpret the information.
FAU_SAR.3 Selectable audit review
FAU_SAR.3.1 The IT environment shall provide the ability to perform searches
of audit data based on the type of event, the user responsible for causing the event,
and as specified in Table A-3 below.
Audit Search Criteria
Table A-3
Section/Function
Certificate Request Remote and Local Data Entry
Certificate Revocation Request Remote and Local
Data Entry
FAU_SEL.1 Selective audit (iteration 1)
668 Netscape Certificate Management System Administrator's Guide • February 2003
Event
An Administrator changes the
type of authenticator, e.g., from
password to biometrics
Roles and users are added or
deleted
The access control privileges of
a user account or a role are
modified
Search Criteria
Identity of the subject of the certificate being
requested
Identity of the subject of the certificate to be
revoked
Additional Details