Controls & assessment objectives

9 controls

• AU.L2-3.3.1AU · Audit and AccountabilityLevel 2CMMC L2

  System Auditing

  Create and retain system audit logs and records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity.

  • 6objectives
  • 1examples
  • 0threads
• AU.L2-3.3.2AU · Audit and AccountabilityLevel 2CMMC L2

  User Accountability

  Ensure that the actions of individual system users can be uniquely traced to those users so they can be held accountable for their actions.

  • 2objectives
  • 1examples
  • 0threads
• AU.L2-3.3.3AU · Audit and AccountabilityLevel 2CMMC L2

  Event Review

  Review and update logged events.

  • 3objectives
  • 1examples
  • 0threads
• AU.L2-3.3.4AU · Audit and AccountabilityLevel 2CMMC L2

  Audit Failure Alerting

  Alert in the event of an audit logging process failure.

  • 3objectives
  • 1examples
  • 0threads
• AU.L2-3.3.5AU · Audit and AccountabilityLevel 2CMMC L2

  Audit Correlation

  Correlate audit record review, analysis, and reporting processes for investigation and response to indications of unlawful, unauthorized, suspicious, or unusual activity.

  • 2objectives
  • 1examples
  • 0threads
• AU.L2-3.3.6AU · Audit and AccountabilityLevel 2CMMC L2

  Reduction & Reporting

  Provide audit record reduction and report generation to support on-demand analysis and reporting.

  • 2objectives
  • 1examples
  • 0threads
• AU.L2-3.3.7AU · Audit and AccountabilityLevel 2CMMC L2

  Authoritative Time Source

  Provide a system capability that compares and synchronizes internal system clocks with an authoritative source to generate time stamps for audit records.

  • 3objectives
  • 1examples
  • 0threads
• AU.L2-3.3.8AU · Audit and AccountabilityLevel 2CMMC L2

  Audit Protection

  Protect audit information and audit logging tools from unauthorized access, modification, and deletion.

  • 6objectives
  • 1examples
  • 0threads
• AU.L2-3.3.9AU · Audit and AccountabilityLevel 2CMMC L2

  Audit Management

  Limit management of audit logging functionality to a subset of privileged users.

  • 2objectives
  • 1examples
  • 0threads