A.8.2 Audit Checklist

When to use this

Use this checklist during an internal audit of privileged access allocation, use, monitoring, emergency access, and removal.

Related controls

• A.8.2 Privileged Access Rights
• A.8.2 Audit Evidence Pack
• Privileged Access Register
• Privileged Access Review Checklist
• Emergency Privileged Access Record
• Privileged Activity Log Review Checklist

Audit checklist

• Review privileged access policy/procedure.
• Review privileged access register.
• Sample privileged access approvals and justifications.
• Check separate privileged identities where feasible.
• Check privileged activity logging.
• Review log protection and retention.
• Sample privileged activity reviews.
• Review emergency access records and post-use reviews.
• Check privilege removal after role change or end of need.
• Interview privileged users.

Findings table