AU
APP101: Help Desk
If there is an admin/support interface for help desk users, are actions performed through that interface being logged according to AELS?
Guidance: Administrative interfaces are desirable to make sure that proper procedures are followed and so that help desk activities can be directly audited through the application. If the application contains a separate admin/support interface, the security-relevant actions (refer to CISS for list) performed through that interface must be logged.