AU-5(1)

Requirement

Provide a warning to [Assignment: organization-defined personnel, roles, and/or locations] within [Assignment: organization-defined time period] when allocated audit log storage volume reaches [Assignment: organization-defined percentage] of repository maximum audit log storage capacity.

Discussion

Organizations may have multiple audit log storage repositories distributed across multiple system components with each repository having different storage volume capacities.

NIST 800-53A Assessment Guidance

Examine

[SELECT FROM: Audit and accountability policy; procedures addressing response to audit processing failures; system design documentation; system security plan; privacy system configuration settings and associated documentation; system audit records; other relevant documents or records].

Interview

[SELECT FROM: Organizational personnel with audit and accountability responsibilities; organizational personnel with information security and privacy responsibilities; system/network administrators; system developers].

ID	Assessment Objectives
AU-05(01)	a warning is provided to <AU-05(01)_ODP[01] personnel, roles, and/or locations> within <AU-05(01)_ODP[02] time period> when allocated audit log storage volume reaches <AU-05(01)_ODP[03] percentage> of repository maximum audit log storage capacity.

Our CMMC Overview Course simplifies CMMC. Enroll so you can make informed decisions!