Hardened 6.6.12 AAC_AUTH-11

### 6.6.11 AAC_AUTH-11

**Objective:** Ensure auditability of the system.

**Objective:** Any privileged action has received its authorisation prior execution, except the action is to restore the logging functionality.

**Preparation:**

**Activities:**

1. Investigate the system;

2. Tricker listed activities.

2. Login as privileged user;

3. Disable intentionally all auditabl event collection systems from outside the product by either:

   1. making the file based system read only

   2. or by disrupting the connectivity to a centralised system

4. Tricker listed activities.

**Verdict:**

**Supporting Evidence:**

* Evidence of system about the rejection of the command and that it is not executed;

* Metrics output relevant for the activities, if available;

* Relevant vendor or design documentation describing the applied measures;

* Test reports showing the steps performed and results obtained;