AU-15: Alternate Audit Capability

CSF v1.1 References:


  • Low


  • Moderate


  • High


Warning icon.

Control is withdrawn in the next version of this control set and incorporated into: AU-5(5): Alternate Audit Logging Capability.

Control Statement

The organization provides an alternate audit capability in the event of a failure in primary audit capability that provides [Assignment: organization-defined alternate audit functionality].

Supplemental Guidance

Since an alternate audit capability may be a short-term protection employed until the failure in the primary auditing capability is corrected, organizations may determine that the alternate audit capability need only provide a subset of the primary audit functionality that is impacted by the failure.