AU-9(2): Audit Backup On Separate Physical Systems / Components

Control Family:

Audit And Accountability

Parent Control:

AU-9: Protection Of Audit Information

Priority:

P1: Implement P1 security controls first.

CSF v1.1 References:

PR.PT-1

Threats Addressed:

Tampering

Baselines:

High

Next Version:

NIST Special Publication 800-53 Revision 5.2.0:
AU-9(2): Store on Separate Physical Systems or Components

Control Statement

The information system backs up audit records [Assignment: organization-defined frequency] onto a physically different system or system component than the system or component being audited.

Supplemental Guidance

This control enhancement helps to ensure that a compromise of the information system being audited does not also result in a compromise of the audit records.