AU-5(1): Storage Capacity Warning

Control Family:

Audit and Accountability

Parent Control:

AU-5: Response to Audit Logging Process Failures

Threats Addressed:

Denial of Service

Baselines:

High

Previous Version:

NIST Special Publication 800-53 Revision 4:
AU-5(1): Audit Storage Capacity

Control Statement

Provide a warning to [Assignment: organization-defined personnel, roles, and/or locations] within [Assignment: organization-defined time period] when allocated audit log storage volume reaches [Assignment: organization-defined percentage] of repository maximum audit log storage capacity.

Supplemental Guidance

Organizations may have multiple audit log storage repositories distributed across multiple system components with each repository having different storage volume capacities.