AU-12(2)

Requirement

Produce a system-wide (logical or physical) audit trail composed of audit records in a standardized format.

Discussion

Audit records that follow common standards promote interoperability and information exchange between devices and systems. Promoting interoperability and information exchange facilitates the production of event information that can be readily analyzed and correlated. If logging mechanisms do not conform to standardized formats, systems may convert individual audit records into standardized formats when compiling system-wide audit trails.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Audit and accountability policy; system security plan; privacy plan; procedures addressing audit record generation; system design documentation; system configuration settings and associated documentation; system-wide audit trail (logical or physical); system audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with audit record generation responsibilities; organizational personnel with security responsibilities; system/network administrators; system developers].

Test

[SELECT FROM: Mechanisms implementing audit record generation capability].

ID	Assessment Objectives
AU-12(02)	a system-wide (logical or physical) audit trail composed of audit records is produced in a standardized format.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!