10.1 Implement audit trails to link all access to system components to each individual user.
10.1 Verify, through observation and interviewing the system administrator, that:
Audit trails are enabled and active for system components.
Access to system components is linked to individual users.
It is critical to have a process or system that links user access to system components accessed.
This system generates audit logs and provides the ability to trace back suspicious activity to a specific user.