AU-2(3): Reviews And Updates

Control Family:

Audit And Accountability

Parent Control:

AU-2: Audit Events

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

ID.SC-4
PR.PT-1

Threats Addressed:

Repudiation

Baselines:

Moderate
High

Control is withdrawn in the next version of this control set and incorporated into: AU-2: Event Logging.

Control Statement

The organization reviews and updates the audited events [Assignment: organization-defined frequency].

Supplemental Guidance

Over time, the events that organizations believe should be audited may change. Reviewing and updating the set of audited events periodically is necessary to ensure that the current set is still necessary and sufficient.