Generation Of Audit Logs; Table 26: Auditable Events And Auditable Information - Ricoh Aficio MP 8001 Manual

7.1.1.1

Generation of Audit Logs

The TOE generates audit log entries whenever an auditable event occurs, and appends these to audit log
files. Audit logs consist of basic audit information and expanded audit information. Basic audit information
is data recorded when any kind of auditable event occurs. Expanded audit information is data recorded for
the generation of auditable events that require additional information for audit. Table 26 shows the audit
information for each auditable event.
If there is insufficient space in the audit log files to append new audit log files, older audit logs (identifiable
by their time and date details) are overwritten with newer audit logs.

Table 26: Auditable events and auditable information

Auditable events
Starting Audit Function (*1)
Ending Audit Function (*1)
Login
Starting Lockout
Releasing Lockout
Lockout release at TOE startup
(*2)
HDD encryption key generation
Successful storage of document
data
Successful reading of document
data (*3)
Successful deletion
document data
Receiving fax
Changing user password
(including new creation and
deletion)
Deletion of administrator role
Addition of administrator role
Changing document data ACL
Changing date and time of
system clock
Communication with trusted IT
product
Copyright (c) 2010 RICOH COMPANY, LTD. All Rights Reserved.
Basic audit information
- Date/time of event
- Types of event (auditable events
in this table)
- Subject identity (*4)
- Outcome
of
Audit logs
Expanded audit information
-
-
-
Locked out user
Locked out user who is to be
released
Release methods (auto Lockout
release/manual Lockout release)
-
-
ID of object document data
ID of object document data
ID of object document data
-
The ID of the user i n the event
of
creation/changing/deletion
another user's
details
-
-
ID of object document data
-
Communication IP address
Page 66 of 82
new
of
authentication