AC-2(4): Automated Audit Actions

Control Family:

Access Control

Parent Control:

AC-2: Account Management

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.AC-1
PR.AC-4
PR.AC-6
DE.CM-1
DE.CM-3

Threats Addressed:

Spoofing
Repudiation

Baselines:

Moderate
High

Next Version:

NIST Special Publication 800-53 Revision 5:
AC-2(4): Automated Audit Actions

Control Statement

The information system automatically audits account creation, modification, enabling, disabling, and removal actions, and notifies [Assignment: organization-defined personnel or roles].