AU-11(1)

Requirement

Employ [Assignment: organization-defined measures] to ensure that long-term audit records generated by the system can be retrieved.

Discussion

Organizations need to access and read audit records requiring long-term storage (on the order of years). Measures employed to help facilitate the retrieval of audit records include converting records to newer formats, retaining equipment capable of reading the records, and retaining the necessary documentation to help personnel understand how to interpret the records.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Audit and accountability policy; system security plan; privacy plan; audit record retention policy and procedures; system design documentation; system configuration settings and associated documentation; audit record archives; audit logs; audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with audit record retention responsibilities; organizational personnel with information security and privacy responsibilities; system/network administrators].

ID	Assessment Objectives
AU-11(01)	<AU-11(01)_ODP measures> are employed to ensure that long-term audit records generated by the system can be retrieved.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!