NIST Special Publication 800-53 Revision 4
IDNameBaselinesPriorityThreats
LowModerateHigh
AC-2(4)Automated Audit Actions ••
  • P1
STRIDE-LM
(9)Restrictions On Use Of Shared / Group Accounts   
  • P1
STRIDE-LM
AC-3(10)Audited Override Of Access Control Mechanisms   
  • P1
STRIDE-LM
AC-6(9)Auditing Use Of Privileged Functions ••
  • P1
STRIDE-LM
AU-1Audit And Accountability Policy And Procedures•••
  • P1
STRIDE-LM
AU-2Audit Events•••
  • P1
STRIDE-LM
(3)Reviews And Updates ••
  • P1
STRIDE-LM
AU-3Content Of Audit Records•••
  • P1
STRIDE-LM
(1)Additional Audit Information ••
  • P1
STRIDE-LM
(2)Centralized Management Of Planned Audit Record Content  •
  • P1
STRIDE-LM
AU-5(1)Audit Storage Capacity  •
  • P1
STRIDE-LM
AU-6Audit Review, Analysis, And Reporting•••
  • P1
STRIDE-LM
(1)Process Integration ••
  • P1
STRIDE-LM
(3)Correlate Audit Repositories ••
  • P1
STRIDE-LM
(4)Central Review And Analysis   
  • P1
STRIDE-LM
(6)Correlation With Physical Monitoring  •
  • P1
STRIDE-LM
(9)Correlation With Information From Nontechnical Sources   
  • P1
STRIDE-LM
AU-7Audit Reduction And Report Generation ••
  • P2
STRIDE-LM
(2)Automatic Sort And Search   
  • P2
STRIDE-LM
AU-8Time Stamps•••
  • P1
STRIDE-LM
(1)Synchronization With Authoritative Time Source ••
  • P1
STRIDE-LM
AU-9Protection Of Audit Information•••
  • P1
STRIDE-LM
(1)Hardware Write-Once Media   
  • P1
STRIDE-LM
AU-10Non-Repudiation  •
  • P2
STRIDE-LM
(1)Association Of Identities   
  • P2
STRIDE-LM
(2)Validate Binding Of Information Producer Identity   
  • P2
STRIDE-LM
(3)Chain Of Custody   
  • P2
STRIDE-LM
(4)Validate Binding Of Information Reviewer Identity   
  • P2
STRIDE-LM
AU-11Audit Record Retention•••
  • P3
STRIDE-LM
(1)Long-Term Retrieval Capability   
  • P3
STRIDE-LM
AU-12Audit Generation•••
  • P1
STRIDE-LM
(1)System-Wide / Time-Correlated Audit Trail  •
  • P1
STRIDE-LM
AU-14Session Audit   
  • P0
STRIDE-LM
(2)Capture/Record And Log Content   
  • P0
STRIDE-LM
AU-15Alternate Audit Capability   
  • P0
STRIDE-LM
AU-16Cross-Organizational Auditing   
  • P0
STRIDE-LM
(1)Identity Preservation   
  • P0
STRIDE-LM
(2)Sharing Of Audit Information   
  • P0
STRIDE-LM
CM-3(6)Cryptography Management   
  • P1
STRIDE-LM
CM-5(1)Automated Access Enforcement / Auditing  •
  • P1
STRIDE-LM
CM-8(4)Accountability Information  •
  • P1
STRIDE-LM
IR-5(1)Automated Tracking / Data Collection / Analysis  •
  • P1
STRIDE-LM
MA-4(1)Auditing And Review   
  • P2
STRIDE-LM
MP-6(1)Review / Approve / Track / Document / Verify  •
  • P1
STRIDE-LM
PE-8Visitor Access Records•••
  • P3
STRIDE-LM
(1)Automated Records Maintenance / Review  •
  • P3
STRIDE-LM
RA-5(8)Review Historic Audit Logs   
  • P1
STRIDE-LM
SC-17Public Key Infrastructure Certificates ••
  • P1
STRIDE-LM
SI-4Information System Monitoring•••
  • P1
STRIDE-LM
(16)Correlate Monitoring Information   
  • P1
STRIDE-LM