3.3.4: Alert in the event of an audit logging process failure
Control Family:
Control Type:
Derived
CSF v1.1 References:
Threats Addressed:
Next Version:
- NIST SP 800-171 Revision 3.0:
- 03.03.04: Response to Audit Logging Process Failures
Discussion
Audit logging process failures include software and hardware errors, failures in the audit record capturing mechanisms, and audit record storage capacity being reached or exceeded. This requirement applies to each audit record data storage repository (i.e., distinct system component where audit records are stored), the total audit record storage capacity of organizations (i.e., all audit record data storage repositories combined), or both.