AU — Audit and Accountability
NIST SP 800-53 Rev. 5 Controls
56 articles
- NIST SP 800-53 Rev. 5 AU-1 — Policy And Procedures
- NIST SP 800-53 Rev. 5 AU-2 — Event Logging
- NIST SP 800-53 Rev. 5 AU-3 — Content Of Audit Records
- NIST SP 800-53 Rev. 5 AU-3(1) — Additional Audit Information
- NIST SP 800-53 Rev. 5 AU-3(3) — Limit Personally Identifiable Information Elements
- NIST SP 800-53 Rev. 5 AU-4 — Audit Log Storage Capacity
- NIST SP 800-53 Rev. 5 AU-4(1) — Transfer To Alternate Storage
- NIST SP 800-53 Rev. 5 AU-5 — Response To Audit Logging Process Failures
- NIST SP 800-53 Rev. 5 AU-5(1) — Storage Capacity Warning
- NIST SP 800-53 Rev. 5 AU-5(2) — Real-Time Alerts
- NIST SP 800-53 Rev. 5 AU-5(3) — Configurable Traffic Volume Thresholds
- NIST SP 800-53 Rev. 5 AU-5(4) — Shutdown On Failure
- NIST SP 800-53 Rev. 5 AU-5(5) — Alternate Audit Logging Capability
- NIST SP 800-53 Rev. 5 AU-6 — Audit Record Review, Analysis, And Reporting
- NIST SP 800-53 Rev. 5 AU-6(1) — Automated Process Integration
- NIST SP 800-53 Rev. 5 AU-6(3) — Correlate Audit Record Repositories
- NIST SP 800-53 Rev. 5 AU-6(4) — Central Review And Analysis
- NIST SP 800-53 Rev. 5 AU-6(5) — Integrated Analysis Of Audit Records
- NIST SP 800-53 Rev. 5 AU-6(6) — Correlation With Physical Monitoring
- NIST SP 800-53 Rev. 5 AU-6(7) — Permitted Actions
- NIST SP 800-53 Rev. 5 AU-6(8) — Full Text Analysis Of Privileged Commands
- NIST SP 800-53 Rev. 5 AU-6(9) — Correlation With Information From Nontechnical Sources
- NIST SP 800-53 Rev. 5 AU-7 — Audit Record Reduction And Report Generation
- NIST SP 800-53 Rev. 5 AU-7(1) — Automatic Processing
- NIST SP 800-53 Rev. 5 AU-8 — Time Stamps
- NIST SP 800-53 Rev. 5 AU-9 — Protection Of Audit Information
- NIST SP 800-53 Rev. 5 AU-9(1) — Hardware Write-Once Media
- NIST SP 800-53 Rev. 5 AU-9(2) — Store On Separate Physical Systems Or Components
- NIST SP 800-53 Rev. 5 AU-9(3) — Cryptographic Protection
- NIST SP 800-53 Rev. 5 AU-9(4) — Access By Subset Of Privileged Users
- NIST SP 800-53 Rev. 5 AU-9(5) — Dual Authorization
- NIST SP 800-53 Rev. 5 AU-9(6) — Read-Only Access
- NIST SP 800-53 Rev. 5 AU-9(7) — Store On Component With Different Operating System
- NIST SP 800-53 Rev. 5 AU-10 — Non-Repudiation
- NIST SP 800-53 Rev. 5 AU-10(1) — Association Of Identities
- NIST SP 800-53 Rev. 5 AU-10(2) — Validate Binding Of Information Producer Identity
- NIST SP 800-53 Rev. 5 AU-10(3) — Chain Of Custody
- NIST SP 800-53 Rev. 5 AU-10(4) — Validate Binding Of Information Reviewer Identity
- NIST SP 800-53 Rev. 5 AU-11 — Audit Record Retention
- NIST SP 800-53 Rev. 5 AU-11(1) — Long-Term Retrieval Capability
- NIST SP 800-53 Rev. 5 AU-12 — Audit Record Generation
- NIST SP 800-53 Rev. 5 AU-12(1) — System-Wide And Time-Correlated Audit Trail
- NIST SP 800-53 Rev. 5 AU-12(2) — Standardized Formats
- NIST SP 800-53 Rev. 5 AU-12(3) — Changes By Authorized Individuals
- NIST SP 800-53 Rev. 5 AU-12(4) — Query Parameter Audits Of Personally Identifiable Information
- NIST SP 800-53 Rev. 5 AU-13 — Monitoring For Information Disclosure
- NIST SP 800-53 Rev. 5 AU-13(1) — Use Of Automated Tools
- NIST SP 800-53 Rev. 5 AU-13(2) — Review Of Monitored Sites
- NIST SP 800-53 Rev. 5 AU-13(3) — Unauthorized Replication Of Information
- NIST SP 800-53 Rev. 5 AU-14 — Session Audit
- NIST SP 800-53 Rev. 5 AU-14(1) — System Start-Up
- NIST SP 800-53 Rev. 5 AU-14(3) — Remote Viewing And Listening
- NIST SP 800-53 Rev. 5 AU-16 — Cross-Organizational Audit Logging
- NIST SP 800-53 Rev. 5 AU-16(1) — Identity Preservation
- NIST SP 800-53 Rev. 5 AU-16(2) — Sharing Of Audit Information
- NIST SP 800-53 Rev. 5 AU-16(3) — Disassociability