AU-11(1): Long-term Retrieval Capability


(Not part of any baseline)

Previous Version:

Control Statement

Employ [Assignment: organization-defined measures] to ensure that long-term audit records generated by the system can be retrieved.

Supplemental Guidance

Organizations need to access and read audit records requiring long-term storage (on the order of years). Measures employed to help facilitate the retrieval of audit records include converting records to newer formats, retaining equipment capable of reading the records, and retaining the necessary documentation to help personnel understand how to interpret the records.