AU-3(2): Centralized Management Of Planned Audit Record Content

CSF v1.1 References:


  • High
Warning icon.

Control is withdrawn in the next version of this control set and incorporated into: PL-9: Central Management.

Control Statement

The information system provides centralized management and configuration of the content to be captured in audit records generated by [Assignment: organization-defined information system components].

Supplemental Guidance

This control enhancement requires that the content to be captured in audit records be configured from a central location (necessitating automation). Organizations coordinate the selection of required audit content to support the centralized management and configuration capability provided by the information system.