• Requirement

    1. Provide audit record generation capability for the event types the system is capable of auditing as defined in AU-2a on [Assignment: organization-defined system components];
    2. Allow [Assignment: organization-defined personnel or roles] to select the event types that are to be logged by specific components of the system; and
    3. Generate audit records for the event types defined in AU-2c that include the audit record content defined in AU-3.
  • Discussion

    Audit records can be generated from many different system components. The event types specified in AU-2d are the event types for which audit logs are to be generated and are a subset of all event types for which the system can generate audit records.

More Info

  • Title

    Audit Record Generation
  • Family

    Audit and Accountability
  • NIST 800-53B Baseline(s)

    • Low
    • Moderate
    • High
  • Related NIST 800-53 ID


NIST 800-53A Assessment Guidance

CMMC Training

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!