AU-11(1): Long-Term Retrieval Capability

Control Family:

Audit And Accountability

Parent Control:

AU-11: Audit Record Retention

Priority:

P3: Implement P3 security controls after implementation of P1 and P2 controls.

CSF v1.1 References:

PR.PT-1

Baselines:

(Not part of any baseline)

Next Version:

NIST Special Publication 800-53 Revision 5:
AU-11(1): Long-term Retrieval Capability

Control Statement

The organization employs [Assignment: organization-defined measures] to ensure that long-term audit records generated by the information system can be retrieved.

Supplemental Guidance

Measures employed by organizations to help facilitate the retrieval of audit records include, for example, converting records to newer formats, retaining equipment capable of reading the records, and retaining necessary documentation to help organizational personnel understand how to interpret the records.