Audit and Accountability (AU)

Overview:The information system provides the capability to process audit records for events of interest based on [Assignment: organization-defined audit fields within audit records]. Supplemental Guidance:Events of interest can be identified by the... Read More

Overview:The information system generates audit records containing information that establishes what type of event occurred, when the event occurred, where the event occurred, the source of the event, the outcome of the event, and the identity of any... Read More

Overview:The organization analyzes and correlates audit records across different repositories to gain organization-wide situational awareness. Supplemental Guidance:Organization-wide situational awareness includes awareness across all three tiers of... Read More

Overview:The organization employs automated mechanisms to integrate audit review, analysis, and reporting processes to support organizational processes for investigation and response to suspicious activities. Supplemental Guidance:Organizational... Read More

Overview:The information system protects audit information and audit tools from unauthorized access, modification, and deletion. Supplemental Guidance:Audit information includes all information (e.g., audit records, audit settings, and audit reports)... Read More

Overview:The information system:a. Alerts [Assignment: organization-defined personnel or roles] in the event of an audit processing failure; andb. Takes the following additional actions: [Assignment: organization-defined actions to be taken (e.g.,... Read More

Overview:The organization reviews and updates the audited events [Assignment: organization-defined frequency]. Supplemental Guidance:Over time, the events that organizations believe should be audited may change. Reviewing and updating the set of... Read More

Overview:The information system:(a) Compares the internal information system clocks [Assignment: organization-defined frequency] with [Assignment: organization-defined authoritative time source]; and(b) Synchronizes the internal system clocks to the... Read More

Overview:The information system:a. Uses internal system clocks to generate time stamps for audit records; andb. Records time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT) and meets ... Read More