AU-2(3): Reviews And Updates

Parent Control:

AU-2: Audit Events

CSF v1.1 References:

Baselines:

  • Moderate
  • High
Warning icon.

Control is withdrawn in the next version of this control set and incorporated into: AU-2: Event Logging.

Control Statement

The organization reviews and updates the audited events [Assignment: organization-defined frequency].

Supplemental Guidance

Over time, the events that organizations believe should be audited may change. Reviewing and updating the set of audited events periodically is necessary to ensure that the current set is still necessary and sufficient.