AU-3(2): Centralized Management Of Planned Audit Record Content

Control Family:

Audit And Accountability

Parent Control:

AU-3: Content Of Audit Records

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.PT-1

Baselines:

High

Control is withdrawn in the next version of this control set and incorporated into: PL-9: Central Management.

Control Statement

The information system provides centralized management and configuration of the content to be captured in audit records generated by [Assignment: organization-defined information system components].

Supplemental Guidance

This control enhancement requires that the content to be captured in audit records be configured from a central location (necessitating automation). Organizations coordinate the selection of required audit content to support the centralized management and configuration capability provided by the information system.