AU-11(1): Long-term Retrieval Capability
Control Family:
Parent Control:
Baselines:
(Not part of any baseline)
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- AU-11(1): Long-Term Retrieval Capability
Control Statement
Employ [Assignment: organization-defined measures] to ensure that long-term audit records generated by the system can be retrieved.
Supplemental Guidance
Organizations need to access and read audit records requiring long-term storage (on the order of years). Measures employed to help facilitate the retrieval of audit records include converting records to newer formats, retaining equipment capable of reading the records, and retaining the necessary documentation to help personnel understand how to interpret the records.