RA-5(8): Review Historic Audit Logs

Control Family:

Risk Assessment

Baselines:

(Not part of any baseline)

Next Version:

Control Statement

The organization reviews historic audit logs to determine if a vulnerability identified in the information system has been previously exploited.